Vulnerability Description
RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contains a Document Object Model (DOM) based cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to DOM environment in the browser. The malicious code is then executed by the web browser in the context of the vulnerable web application.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rsa | Archer | < 6.7.0.2 |
Related Weaknesses (CWE)
References
- https://www.dell.com/support/security/en-us/details/DOC-111112/DSA-2020-049-RSA-Third Party Advisory
- https://www.dell.com/support/security/en-us/details/DOC-111112/DSA-2020-049-RSA-Third Party Advisory
FAQ
What is CVE-2020-5334?
CVE-2020-5334 is a vulnerability with a CVSS score of 8.2 (HIGH). RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contains a Document Object Model (DOM) based cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulner...
How severe is CVE-2020-5334?
CVE-2020-5334 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-5334?
Check the references section above for vendor advisories and patch information. Affected products include: Rsa Archer.