Vulnerabilities > RSA

DATE CVE VULNERABILITY TITLE RISK
2021-01-29 CVE-2020-29535 Cross-site Scripting vulnerability in RSA Archer
Archer before 6.8 P4 (6.8.0.4) contains a stored XSS vulnerability.
network
low complexity
rsa CWE-79
5.4
2020-11-18 CVE-2020-26884 Injection vulnerability in RSA Archer
RSA Archer 6.8 through 6.8.0.3 and 6.9 contains a URL injection vulnerability.
network
low complexity
rsa CWE-74
6.1
2020-07-31 CVE-2020-5384 Improper Authentication vulnerability in RSA Multifactor Authentication Agent 2.0
Authentication Bypass Vulnerability RSA MFA Agent 2.0 for Microsoft Windows contains an Authentication Bypass vulnerability.
local
low complexity
rsa CWE-287
8.4
2020-05-04 CVE-2020-5337 Open Redirect vulnerability in RSA Archer
RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL redirection vulnerability.
network
low complexity
rsa CWE-601
6.1
2020-05-04 CVE-2020-5336 Injection vulnerability in RSA Archer
RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability.
network
low complexity
rsa CWE-74
6.1
2020-05-04 CVE-2020-5335 Cross-Site Request Forgery (CSRF) vulnerability in RSA Archer
RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contain a cross-site request forgery vulnerability.
network
low complexity
rsa CWE-352
8.8
2020-05-04 CVE-2020-5334 Cross-site Scripting vulnerability in RSA Archer
RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contains a Document Object Model (DOM) based cross-site scripting vulnerability.
network
low complexity
rsa CWE-79
6.1
2020-05-04 CVE-2020-5333 Incorrect Authorization vulnerability in RSA Archer
RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an authorization bypass vulnerability in the REST API.
network
low complexity
rsa CWE-863
4.3
2020-05-04 CVE-2020-5332 OS Command Injection vulnerability in RSA Archer
RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain a command injection vulnerability.
network
low complexity
rsa CWE-78
7.2
2020-05-04 CVE-2020-5331 Information Exposure vulnerability in RSA Archer
RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an information exposure vulnerability.
local
low complexity
rsa CWE-200
5.5