PT-2014-3734 · Emc · Emc Rsa Archer

Publicado 2014-05-25 · Atualizado 2015-08-13 · CVE-2014-0639

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions EMC RSA Archer versions 5.x before 5.4 SP1 P3

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The estimated number of potentially affected devices and details about real-world incidents are not specified.

Recommendations For versions 5.x before 5.4 SP1 P3, update to version 5.4 SP1 P3 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2014-0639

Produtos afetados

Emc Rsa Archer

Referências · 5

• http://securityfocus.com/bid/67602 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2014-05/0134.html · Nota
• http://securitytracker.com/id/1030281 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-0639 · Nota de Segurança
• http://packetstormsecurity.com/files/126788/RSA-Archer-GRC-Cross-Site-Scripting.html · Nota