Vulnerability index

Browse CVEs

23 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Archer MEDIUM 6.1
CVE-2024-49211

Reflected XSS was discovered in a Dashboard Listing Archer Platform UX page in Archer Platform 6.x before version 2024.08. A remote unauthenticated a…

Fix: 2024.09+
Fix from $1,600 2024-10-22
Archer MEDIUM 6.1
CVE-2024-49210

Reflected XSS was discovered in an iView List Archer Platform UX page in Archer Platform 6.x before version 2024.09. A remote unauthenticated attacke…

Fix: 2024.09+
Fix from $1,600 2024-10-22
Archer MEDIUM 5.4
CVE-2024-41705

A stored XSS issue was discovered in Archer Platform 6.8 before 2024.06. A remote authenticated malicious Archer user could potentially exploit this …

Fix: 6.13.0.4 / 6.14.0.4+
Fix from $1,600 2024-07-25
Archer MEDIUM 5.4
CVE-2024-41706

A stored XSS issue was discovered in Archer Platform 6 before version 2024.06. A remote authenticated malicious Archer user could potentially exploit…

Fix: 6.14.0.4 / 2024.06+
Fix from $1,600 2024-07-25
Archer MEDIUM 5.4
CVE-2024-41707

An issue was discovered in Archer Platform 6 before 2024.06. Authenticated users can achieve HTML content injection. A remote authenticated malicious…

Fix: 2024.06+
Fix from $1,600 2024-07-25
Archer HIGH 8.8
CVE-2024-34092

An issue was discovered in Archer Platform 6 before 2024.04. Authentication was mishandled because lock did not terminate an existing session. 6.14 P…

Fix: 6.14.0.3+
Fix from $1,950 2024-05-06
Archer MEDIUM 5.4
CVE-2024-34089

An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting (XSS) vulnerability. A remote authenticated malic…

Fix: 6.14.0.3+
Fix from $1,600 2024-05-06
Archer MEDIUM 5.4
CVE-2024-34090

An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting (XSS) vulnerability. The login banner in the Arch…

Fix: 6.14.0.3+
Fix from $1,600 2024-05-06
Archer MEDIUM 5.4
CVE-2024-34091

An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting (XSS) vulnerability. A remote authenticated malic…

Fix: 6.14.0.3+
Fix from $1,600 2024-05-06
Archer MEDIUM 5.3
CVE-2024-34093

An issue was discovered in Archer Platform 6 before 2024.03. There is an X-Forwarded-For Header Bypass vulnerability. An unauthenticated attacker cou…

Fix: 2024.03+
Fix from $1,600 2024-05-06
Archer HIGH 7.5
CVE-2024-26309

Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a sensitive information disclosure vulnerability. An unauthenticated attacker could pote…

Fix: 6.14.0.2.2+
Fix from $1,950 2024-03-08
Archer MEDIUM 5.4
CVE-2024-26313

Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a stored cross-site scripting (XSS) vulnerability. A remote authenticated malicious Arch…

Fix: 6.13.0.3.1 / 6.14.0.2.2+
Fix from $1,600 2024-03-08
Archer MEDIUM 5.7
CVE-2024-26311

Archer Platform 6.x before 6.14 P2 HF1 (6.14.0.2.1) contains a reflected XSS vulnerability. A remote authenticated malicious Archer user could potent…

Fix: 6.14.0.2.1+
Fix from $1,600 2024-02-21
Archer HIGH 8.8
CVE-2023-48641

Archer Platform 6.x before 6.14 P1 HF2 (6.14.0.1.2) contains an insecure direct object reference vulnerability. An authenticated malicious user in a …

Fix: 6.13.0.3 / 6.14.0.1.2+
Fix from $1,950 2023-12-12
Archer MEDIUM 5.4
CVE-2023-48642

Archer Platform 6.x before 6.13 P2 (6.13.0.2) contains an authenticated HTML content injection vulnerability. A remote authenticated malicious Archer…

Fix: 6.13.0.2 / 6.14.0+
Fix from $1,600 2023-12-12
Archer MEDIUM 6.5
CVE-2023-45357

Archer Platform 6.x before 6.13 P2 HF2 (6.13.0.2.2) contains a sensitive information disclosure vulnerability. An authenticated attacker could potent…

Fix: 6.13.0.2.2+
Fix from $1,600 2023-10-17
Archer MEDIUM 5.4
CVE-2023-45358

Archer Platform 6.x before 6.13 P2 HF2 (6.13.0.2.2) contains a stored cross-site scripting (XSS) vulnerability. A remote authenticated malicious Arch…

Fix: 6.13.0.2.2+
Fix from $1,600 2023-10-17
Archer MEDIUM 5.5
CVE-2023-37224

An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information via the l…

Fix: 6.13.0.1+
Fix from $1,600 2023-07-14
Archer MEDIUM 5.4
CVE-2023-37223

Cross Site Scripting (XSS) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows a remote authenticated attacker…

Fix: 6.13.0+
Fix from $1,600 2023-07-14
Archer HIGH 8.0
CVE-2023-32761

Cross Site Request Forgery (CSRF) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacke…

Fix: 6.12.0.6+
Fix from $1,950 2023-07-14
Archer MEDIUM 6.5
CVE-2023-32759

An issue in Archer Platform before v.6.13 and fixed in 6.12.0.6 and 6.13.0 allows an authenticated attacker to obtain sensitive information via a cra…

Fix: 6.12.0.6+
Fix from $1,600 2023-07-14
Archer MEDIUM 6.5
CVE-2023-32760

An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information via API c…

Fix: 6.12.0.6+
Fix from $1,600 2023-07-14
Archer MEDIUM 5.4
CVE-2023-30639

Archer Platform 6.8 before 6.12 P6 HF1 (6.12.0.6.1) contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potential…

Fix: 6.12.0.6.1+
Fix from $1,600 2023-05-01