CVSS: 4.3EPSS: 0%CPEs: 6EXPL: 0CVE-2013-0933
https://notcve.org/view.php?id=CVE-2013-0933
Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en EMC RSA Archer v5.x anterior a GRC 5.3SP1, y Archer Smart Suite Framework v4.x,, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados. • http://archives.neohapsis.com/archives/bugtraq/2013-05/0023.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.0EPSS: 0%CPEs: 6EXPL: 0CVE-2013-0934
https://notcve.org/view.php?id=CVE-2013-0934
EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and modify global reports via unspecified vectors. EMC RSA Archer v5.x anterior a GRC v5.3SP1, y Archer Smart Suite Framework v4.x, permite a usuarios remotos autenticados eludir las restricciones de acceso y modificar informes globales mediante vectores desconocidos. • http://archives.neohapsis.com/archives/bugtraq/2013-05/0023.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 4.0EPSS: 0%CPEs: 6EXPL: 0CVE-2013-0932
https://notcve.org/view.php?id=CVE-2013-0932
EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and upload arbitrary files via unspecified vectors. EMC RSA Archer v5.x anterior a GRC 5.3SP1, y Archer Smart Suite Framework v4.x, permite a atacantes remotos autenticados eludir las restricciones de acceso y subir ficheros de su elección mediante vectores no especificados. • http://archives.neohapsis.com/archives/bugtraq/2013-05/0023.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.5EPSS: 0%CPEs: 5EXPL: 0CVE-2012-2292
https://notcve.org/view.php?id=CVE-2012-2292
The Silverlight cross-domain policy in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 does not restrict access to the Archer application, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors. La política Silverlight cross-domain en EMC RSA Archer SmartSuite Framework v4.x y vRSA Archer GRC v5.x anterior a v5.2SP1 no restringe el acceso a la aplicación Archer, lo que permite a atacantes remotos eludir el Same Origin Policy mediante vectores desconocidos. • http://archives.neohapsis.com/archives/bugtraq/2013-02/0001.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0CVE-2012-2293
https://notcve.org/view.php?id=CVE-2012-2293
Directory traversal vulnerability in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 allows remote authenticated users to upload files, and consequently execute arbitrary code, via a relative path. Vulnerabilidad de salto de directorio en EMC RSA Archer SmartSuite Framework v4.x y RSA Archer GRC v5.x antes de v5.2SP1 permite a usuarios remotos autenticados subir archivos, y por lo tanto ejecutar código arbitrario a través de una ruta relativa. • http://archives.neohapsis.com/archives/bugtraq/2013-02/0001.html • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •