ID CVE-2017-8016
Summary RSA Archer GRC Platform prior to 6.2.0.5 is affected by stored cross-site scripting via the Questionnaire ID field. An authenticated attacker may potentially exploit this to execute arbitrary HTML in the user's browser session in the context of the affected RSA Archer application.
References
Vulnerable Configurations
CVSS
Base: None
Impact:
Exploitability:
refmap via4
confirm http://seclists.org/fulldisclosure/2017/Oct/12
sectrack 1039518
Last major update 11-10-2017 - 15:29
Published 11-10-2017 - 15:29
Last modified 12-10-2017 - 21:29
Back to Top