CVE-2017-14372

6.1 mediumEPSS 1.1%

RSA Archer GRC Platform prior to 6.2.0.5 is affected by reflected cross-site scripting vulnerabilities via certain RSA Archer Help pages. Attackers could potentially exploit this to execute arbitrary HTML in the user's browser session in the context of the affected RSA Archer application.

Severity

CVSS 3.0

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2017-10-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

rsa:archer_grc_platform

References

http://seclists.org/fulldisclosure/2017/Oct/12
http://www.securityfocus.com/bid/101195
http://www.securitytracker.com/id/1039518
http://seclists.org/fulldisclosure/2017/Oct/12
http://www.securityfocus.com/bid/101195

Check your stack JSON