Vulnerabilities > RSA > Archer > 6.1.0.0

DATE CVE VULNERABILITY TITLE RISK
2020-05-04 CVE-2020-5337 Open Redirect vulnerability in RSA Archer
RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL redirection vulnerability.
network
low complexity
rsa CWE-601
6.1
6.1
2020-05-04 CVE-2020-5336 Injection vulnerability in RSA Archer
RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability.
network
low complexity
rsa CWE-74
6.1
6.1
2020-05-04 CVE-2020-5335 Cross-Site Request Forgery (CSRF) vulnerability in RSA Archer
RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contain a cross-site request forgery vulnerability.
network
low complexity
rsa CWE-352
8.8
8.8
2020-05-04 CVE-2020-5334 Cross-site Scripting vulnerability in RSA Archer
RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contains a Document Object Model (DOM) based cross-site scripting vulnerability.
network
low complexity
rsa CWE-79
6.1
6.1
2020-05-04 CVE-2020-5333 Incorrect Authorization vulnerability in RSA Archer
RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an authorization bypass vulnerability in the REST API.
network
low complexity
rsa CWE-863
4.3
4.3
2020-05-04 CVE-2020-5332 OS Command Injection vulnerability in RSA Archer
RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain a command injection vulnerability.
network
low complexity
rsa CWE-78
7.2
7.2
2020-05-04 CVE-2020-5331 Information Exposure vulnerability in RSA Archer
RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an information exposure vulnerability.
local
low complexity
rsa CWE-200
5.5
5.5
2019-09-18 CVE-2019-3758 Weak Password Requirements vulnerability in RSA Archer
RSA Archer, versions prior to 6.6 P2 (6.6.0.2), contain an improper authentication vulnerability.
network
low complexity
rsa CWE-521
critical
 9.8
9.8
2019-09-18 CVE-2019-3756 Information Exposure vulnerability in RSA Archer
RSA Archer, versions prior to 6.6 P3 (6.6.0.3), contain an information disclosure vulnerability.
network
low complexity
rsa CWE-200
6.5
6.5
2018-08-24 CVE-2018-11065 SQL Injection vulnerability in RSA Archer 6.1.0.0
The WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 and 6.4.x prior to 6.4.0.1, contains a SQL injection vulnerability.
network
low complexity
rsa CWE-89
4.3
4.3