Browse CVEs

MEDIUM 6.1 CVE-2024-49211 Reflected XSS was discovered in a Dashboard Listing Archer Platform UX page in Archer Platform 6.x before version 2024.08. A remote unauthenticated a… Archer 2024.09+ Fix from $1,6002024-10-22 MEDIUM 6.1 CVE-2024-49210 Reflected XSS was discovered in an iView List Archer Platform UX page in Archer Platform 6.x before version 2024.09. A remote unauthenticated attacke… Archer 2024.09+ Fix from $1,6002024-10-22 MEDIUM 5.4 CVE-2024-41705 A stored XSS issue was discovered in Archer Platform 6.8 before 2024.06. A remote authenticated malicious Archer user could potentially exploit this … Archer 6.13.0.4 / 6.14.0.4+ Fix from $1,6002024-07-25 MEDIUM 5.4 CVE-2024-41706 A stored XSS issue was discovered in Archer Platform 6 before version 2024.06. A remote authenticated malicious Archer user could potentially exploit… Archer 6.14.0.4 / 2024.06+ Fix from $1,6002024-07-25 MEDIUM 5.4 CVE-2024-41707 An issue was discovered in Archer Platform 6 before 2024.06. Authenticated users can achieve HTML content injection. A remote authenticated malicious… Archer 2024.06+ Fix from $1,6002024-07-25 HIGH 8.8 CVE-2024-34092 An issue was discovered in Archer Platform 6 before 2024.04. Authentication was mishandled because lock did not terminate an existing session. 6.14 P… Archer 6.14.0.3+ Fix from $1,9502024-05-06 MEDIUM 5.4 CVE-2024-34089 An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting (XSS) vulnerability. A remote authenticated malic… Archer 6.14.0.3+ Fix from $1,6002024-05-06 MEDIUM 5.4 CVE-2024-34090 An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting (XSS) vulnerability. The login banner in the Arch… Archer 6.14.0.3+ Fix from $1,6002024-05-06 MEDIUM 5.4 CVE-2024-34091 An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting (XSS) vulnerability. A remote authenticated malic… Archer 6.14.0.3+ Fix from $1,6002024-05-06 MEDIUM 5.3 CVE-2024-34093 An issue was discovered in Archer Platform 6 before 2024.03. There is an X-Forwarded-For Header Bypass vulnerability. An unauthenticated attacker cou… Archer 2024.03+ Fix from $1,6002024-05-06 HIGH 7.5 CVE-2024-26309 Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a sensitive information disclosure vulnerability. An unauthenticated attacker could pote… Archer 6.14.0.2.2+ Fix from $1,9502024-03-08 MEDIUM 5.4 CVE-2024-26313 Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a stored cross-site scripting (XSS) vulnerability. A remote authenticated malicious Arch… Archer 6.13.0.3.1 / 6.14.0.2.2+ Fix from $1,6002024-03-08 MEDIUM 5.7 CVE-2024-26311 Archer Platform 6.x before 6.14 P2 HF1 (6.14.0.2.1) contains a reflected XSS vulnerability. A remote authenticated malicious Archer user could potent… Archer 6.14.0.2.1+ Fix from $1,6002024-02-21 HIGH 8.8 CVE-2023-48641 Archer Platform 6.x before 6.14 P1 HF2 (6.14.0.1.2) contains an insecure direct object reference vulnerability. An authenticated malicious user in a … Archer 6.13.0.3 / 6.14.0.1.2+ Fix from $1,9502023-12-12 MEDIUM 5.4 CVE-2023-48642 Archer Platform 6.x before 6.13 P2 (6.13.0.2) contains an authenticated HTML content injection vulnerability. A remote authenticated malicious Archer… Archer 6.13.0.2 / 6.14.0+ Fix from $1,6002023-12-12 MEDIUM 6.5 CVE-2023-45357 Archer Platform 6.x before 6.13 P2 HF2 (6.13.0.2.2) contains a sensitive information disclosure vulnerability. An authenticated attacker could potent… Archer 6.13.0.2.2+ Fix from $1,6002023-10-17 MEDIUM 5.4 CVE-2023-45358 Archer Platform 6.x before 6.13 P2 HF2 (6.13.0.2.2) contains a stored cross-site scripting (XSS) vulnerability. A remote authenticated malicious Arch… Archer 6.13.0.2.2+ Fix from $1,6002023-10-17 MEDIUM 5.5 CVE-2023-37224 An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information via the l… Archer 6.13.0.1+ Fix from $1,6002023-07-14 MEDIUM 5.4 CVE-2023-37223 Cross Site Scripting (XSS) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows a remote authenticated attacker… Archer 6.13.0+ Fix from $1,6002023-07-14 HIGH 8.0 CVE-2023-32761 Cross Site Request Forgery (CSRF) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacke… Archer 6.12.0.6+ Fix from $1,9502023-07-14 MEDIUM 6.5 CVE-2023-32759 An issue in Archer Platform before v.6.13 and fixed in 6.12.0.6 and 6.13.0 allows an authenticated attacker to obtain sensitive information via a cra… Archer 6.12.0.6+ Fix from $1,6002023-07-14 MEDIUM 6.5 CVE-2023-32760 An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information via API c… Archer 6.12.0.6+ Fix from $1,6002023-07-14 MEDIUM 5.4 CVE-2023-30639 Archer Platform 6.8 before 6.12 P6 HF1 (6.12.0.6.1) contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potential… Archer 6.12.0.6.1+ Fix from $1,6002023-05-01