CVE-2021-29252

RSA Archer before 6.9 SP1 P1 (6.9.1.1) contains a stored XSS vulnerability

Medium · published May 26, 2021

CVSS v3.1
5.4
EPSS
1%
Percentile
56.5
In the wild
Unconfirmed
What it is

RSA Archer before 6.9 SP1 P1 (6.9.1.1) contains a stored XSS vulnerability. A remote authenticated malicious Archer user with access to modify link name fields could potentially exploit this vulnerability to execute code in a victim's browser.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00812 · 56.5th percentile
Published
2021-05-26T03:56Z
EPSS history
Timeline
  • 26 MAY 03:56Z
    RSA Archer before 6.9 SP1 P1 (6.9.1.1) contains a stored XSS vulnerability
    cvelistv5