Vulnerabilities > Archerirm > Archer > 6.11.0.4

DATE CVE VULNERABILITY TITLE RISK
2024-03-08 CVE-2024-26309 Unspecified vulnerability in Archerirm Archer
Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a sensitive information disclosure vulnerability.
network
low complexity
archerirm
7.5
2024-03-08 CVE-2024-26313 Unspecified vulnerability in Archerirm Archer
Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a stored cross-site scripting (XSS) vulnerability.
network
low complexity
archerirm
5.4
2024-02-21 CVE-2024-26310 Unspecified vulnerability in Archerirm Archer
Archer Platform 6.8 before 6.14 P2 (6.14.0.2) contains an improper access control vulnerability.
network
low complexity
archerirm
4.3
2023-12-12 CVE-2023-48641 Authorization Bypass Through User-Controlled Key vulnerability in Archerirm Archer
Archer Platform 6.x before 6.14 P1 HF2 (6.14.0.1.2) contains an insecure direct object reference vulnerability.
network
low complexity
archerirm CWE-639
8.8
2023-12-12 CVE-2023-48642 Cross-site Scripting vulnerability in Archerirm Archer
Archer Platform 6.x before 6.13 P2 (6.13.0.2) contains an authenticated HTML content injection vulnerability.
network
low complexity
archerirm CWE-79
5.4
2023-10-17 CVE-2023-45357 Exposure of Resource to Wrong Sphere vulnerability in Archerirm Archer
Archer Platform 6.x before 6.13 P2 HF2 (6.13.0.2.2) contains a sensitive information disclosure vulnerability.
network
low complexity
archerirm CWE-668
6.5
2023-10-17 CVE-2023-45358 Cross-site Scripting vulnerability in Archerirm Archer
Archer Platform 6.x before 6.13 P2 HF2 (6.13.0.2.2) contains a stored cross-site scripting (XSS) vulnerability.
network
low complexity
archerirm CWE-79
5.4
2023-07-14 CVE-2023-32759 Exposure of Resource to Wrong Sphere vulnerability in Archerirm Archer
An issue in Archer Platform before v.6.13 and fixed in 6.12.0.6 and 6.13.0 allows an authenticated attacker to obtain sensitive information via a crafted URL.
network
low complexity
archerirm CWE-668
6.5
2023-07-14 CVE-2023-32760 Exposure of Resource to Wrong Sphere vulnerability in Archerirm Archer
An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information via API calls related to data feeds and data publication.
network
low complexity
archerirm CWE-668
6.5
2023-07-14 CVE-2023-32761 Cross-Site Request Forgery (CSRF) vulnerability in Archerirm Archer
Cross Site Request Forgery (CSRF) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to execute arbitrary code via a crafted request.
network
low complexity
archerirm CWE-352
8.0