Known vulnerabilities in RSA Archer

Vendor: Dell
Software: RSA Archer
Software CPE: cpe:2.3:a:dell:rsa_archer:*:*:*:*:*:*:*:*
Website: https://www.delltechnologies.com/en-us/index.htm
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.9

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting RSA Archer RSA Archer is affected by 17 known vulnerabilities: 1 medium, 16 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU16784 - Improper Access Control
CVE-2018-15780		 CWE-284 Low
No
No
 6.5.0.1 28.12.2018 SB2018122807
#VU14485 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-11065		 CWE-89 Low
No
No
 6.3.0.7, 6.4.0.1 21.08.2018 SB2018082202
#VU13980 - Permissions, Privileges, and Access Controls
CVE-2018-11060		 CWE-264 Low
No
No
 6.1.0.3, 6.2.0.10, 6.3.0.7, 6.4.0.1 23.07.2018 SB2018072017
#VU13979 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-11059		 CWE-79 Low
No
No
 6.1.0.3, 6.2.0.10, 6.3.0.7, 6.4.0.1 20.07.2018 SB2018072017
#VU10884 - Improper Access Control
CVE-2018-1219		 CWE-284 Low
No
No
 - 07.03.2018 SB2018030709
#VU10883 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-1220		 CWE-601 Low
No
No
 - 07.03.2018 SB2018030709
#VU8797 - Permissions, Privileges, and Access Controls
CVE-2017-14369		 CWE-264 Low
No
No
 - 11.10.2017 SB2017101105
#VU8796 - Improper input validation
CVE-2017-8025		 CWE-20 Low
No
No
 - 11.10.2017 SB2017101105
#VU8795 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-14372		 CWE-79 Low
No
No
 - 11.10.2017 SB2017101105
#VU8794 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-14371		 CWE-79 Low
No
No
 - 11.10.2017 SB2017101105
#VU8793 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-14370		 CWE-79 Low
No
No
 - 11.10.2017 SB2017101105
#VU8792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8016		 CWE-79 Low
No
No
 - 09.10.2017 SB2017101105
#VU7316 - Permissions, Privileges, and Access Controls
CVE-2017-4999		 CWE-264 Low
No
No
 - 04.07.2017 SB2017070409
#VU7314 - Exposure of sensitive information to an unauthorized actor
CVE-2017-5000		 CWE-200 Low
No
No
 - 04.07.2017 SB2017070409
#VU7313 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-5002		 CWE-601 Low
No
No
 - 04.07.2017 SB2017070409
#VU7312 - Cross-Site Request Forgery (CSRF)
CVE-2017-4998		 CWE-352 Medium
No
No
 - 04.07.2017 SB2017070409
#VU7311 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-5001		 CWE-79 Low
No
No
 - 04.07.2017 SB2017070409