CVE-2021-29252

· MEDIUMModified

← All CVEs

CVSS v3.1

5.4

EPSS

0.81%

Published

May 26, 2021

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

RSA Archer before 6.9 SP1 P1 (6.9.1.1) contains a stored XSS vulnerability. A remote authenticated malicious Archer user with access to modify link name fields could potentially exploit this vulnerability to execute code in a victim's browser.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weaknesses (CWE)

CWE-79

Affected Products (4)

rsa · archer (up to 6.6.0.8)vulnerable

rsa · archer (up to 6.7.0.8)vulnerable

rsa · archer (up to 6.8.0.5)vulnerable

rsa · archer (up to 6.9.1.1)vulnerable

References (4)

https://community.rsa.com/t5/archer-product-advisories/rsa-2021-04-archer-an-rsa-business-update-for-multiple/ta-p/603223

Vendor Advisory

https://www.rsa.com/en-us/company/vulnerability-response-policy

Vendor Advisory

https://community.rsa.com/t5/archer-product-advisories/rsa-2021-04-archer-an-rsa-business-update-for-multiple/ta-p/603223

Vendor Advisory

https://www.rsa.com/en-us/company/vulnerability-response-policy

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs