Vulnerabilities > RSA > Archer GRC Platform > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-03-13 | CVE-2019-3715 | Information Exposure Through Log Files vulnerability in RSA Archer GRC Platform RSA Archer versions, prior to 6.5 SP1, contain an information exposure vulnerability. | 5.5 |
| 2019-01-03 | CVE-2018-15780 | Unspecified vulnerability in RSA Archer GRC Platform RSA Archer versions prior to 6.5.0.1 contain an improper access control vulnerability. | 6.5 |
| 2017-10-11 | CVE-2017-14372 | Cross-site Scripting vulnerability in RSA Archer GRC Platform RSA Archer GRC Platform prior to 6.2.0.5 is affected by reflected cross-site scripting vulnerabilities via certain RSA Archer Help pages. | 6.1 |
| 2017-10-11 | CVE-2017-14371 | Cross-site Scripting vulnerability in RSA Archer GRC Platform RSA Archer GRC Platform prior to 6.2.0.5 is affected by reflected cross-site scripting via the request URL. | 6.1 |
| 2017-10-11 | CVE-2017-14370 | Cross-site Scripting vulnerability in RSA Archer GRC Platform RSA Archer GRC Platform prior to 6.2.0.5 is affected by stored cross-site scripting via the Source Asset ID field. | 5.4 |
| 2017-10-11 | CVE-2017-14369 | Unspecified vulnerability in RSA Archer GRC Platform RSA Archer GRC Platform prior to 6.2.0.5 is affected by a privilege escalation vulnerability. | 4.3 |