CVSS: 5.4EPSS: 0%CPEs: 4EXPL: 0CVE-2020-29535
https://notcve.org/view.php?id=CVE-2020-29535
29 Jan 2021 — Archer before 6.8 P4 (6.8.0.4) contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When application users access the corrupted data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application. Archer versiones anteriores a 6.8 P4 (6.8.0.4), contiene una vulnerabilidad de tipo XSS almac... • https://community.rsa.com/docs/DOC-115223 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 0CVE-2020-26884
https://notcve.org/view.php?id=CVE-2020-26884
18 Nov 2020 — RSA Archer 6.8 through 6.8.0.3 and 6.9 contains a URL injection vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability by tricking a victim application user into executing malicious JavaScript code in the context of the web application. RSA Archer versiones 6.8 hasta 6.8.0.3 y 6.9, contiene una vulnerabilidad de inyección URL. Un atacante no autenticado remoto podría explotar esta vulnerabilidad al engañar a un usuario de la aplicación víctima a ejecutar código J... • https://community.rsa.com/docs/DOC-114997 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') •