Priority MEDIUM 53
In Archer Platform 6 through 6.14.00202.10024, an authenticated user with record creation privileges can manipulate immutable fields, such as the creation date, by intercepting and modifying a Copy request via a GenericC…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00399 · Published 2025-03-11 · No fix listed CWE-472
Priority MEDIUM 41
Archer Platform 6.x before 6.14 P1 HF2 (6.14.0.1.2) contains an insecure direct object reference vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00476 · Published 2023-12-12 · No fix listed CWE-639
Priority LOW 39
Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a sensitive information disclosure vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00499 · Published 2024-03-08 · No fix listed CWE-200
Priority LOW 38
An issue was discovered in Archer Platform 6 before 2024.04.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00389 · Published 2024-05-06 · No fix listed CWE-613
Priority LOW 37
Archer Platform 6.x before 6.13 P2 HF2 (6.13.0.2.2) contains a stored cross-site scripting (XSS) vulnerability.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00475 · Published 2023-10-17 · No fix listed CWE-79
Priority LOW 36
An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information via API calls related to data feeds and data publication.
CVSS 3.1HIGH 7.7· Network · Low privileges · User interaction · EPSS 0.00484 · Published 2023-07-14 · No fix listed CWE-668
Priority LOW 36
An issue in Archer Platform before v.6.13 and fixed in 6.12.0.6 and 6.13.0 allows an authenticated attacker to obtain sensitive information via a crafted URL.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00584 · Published 2023-07-14 · No fix listed CWE-668
Priority LOW 35
Cross Site Request Forgery (CSRF) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to execute arbitrary code via a crafted request.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00378 · Published 2023-07-14 · No fix listed CWE-352
Priority LOW 34
A stored XSS issue was discovered in Archer Platform 6 before version 2024.06.
CVSS 3.1HIGH 7.3· Network · Low privileges · User interaction · EPSS 0.00327 · Published 2024-07-25 · No fix listed CWE-79
Priority LOW 34
An issue was discovered in Archer Platform 6 before 2024.04.
CVSS 3.1HIGH 7.3· Network · Low privileges · User interaction · EPSS 0.00461 · Published 2024-05-06 · No fix listed CWE-79
Priority LOW 33
A stored XSS issue was discovered in Archer Platform 6.8 before 2024.06.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00294 · Published 2024-07-25 · No fix listed CWE-79
Priority LOW 33
An issue was discovered in Archer Platform 6 before 2024.04.
CVSS 3.1HIGH 7.3· Network · Low privileges · User interaction · EPSS 0.00505 · Published 2024-05-06 · No fix listed CWE-79
Priority LOW 33
Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a stored cross-site scripting (XSS) vulnerability.
CVSS 3.1HIGH 7.3· Network · Low privileges · User interaction · EPSS 0.00505 · Published 2024-03-08 · No fix listed CWE-79
Priority LOW 32
An issue was discovered in Archer Platform 6 before 2024.04.
CVSS 3.1HIGH 7.3· Network · Low privileges · User interaction · EPSS 0.00423 · Published 2024-05-06 · No fix listed CWE-79
Priority LOW 31
Archer Platform 6.8 before 6.12 P6 HF1 (6.12.0.6.1) contains a stored XSS vulnerability.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00294 · Published 2023-05-01 · No fix listed CWE-79
Priority LOW 30
Archer Platform 6.x before 6.13 P2 HF2 (6.13.0.2.2) contains a sensitive information disclosure vulnerability.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00552 · Published 2023-10-17 · No fix listed CWE-668
Priority LOW 28
Archer Platform 2024.03 before version 2024.09 is affected by an API authorization bypass vulnerability related to supporting application files.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00258 · Published 2024-10-22 · No fix listed CWE-863
Priority LOW 27
Reflected XSS was discovered in a Dashboard Listing Archer Platform UX page in Archer Platform 6.x before version 2024.08.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00343 · Published 2024-10-22 · No fix listed CWE-79
Priority LOW 27
Reflected XSS was discovered in an iView List Archer Platform UX page in Archer Platform 6.x before version 2024.09.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00343 · Published 2024-10-22 · No fix listed CWE-79
Priority LOW 26
Archer Platform 2024.03 before version 2024.08 is affected by an authorization bypass vulnerability related to supporting application files.
CVSS 3.1MEDIUM 5.9· Network · No auth · User interaction · EPSS 0.00272 · Published 2024-10-22 · No fix listed CWE-863
Priority LOW 26
Archer Platform 6.x before 6.14 P2 HF1 (6.14.0.2.1) contains a reflected XSS vulnerability.
CVSS 3.1MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.00519 · Published 2024-02-21 · No fix listed CWE-79
Priority LOW 26
An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information via the log files.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00188 · Published 2023-07-14 · No fix listed CWE-532
Priority LOW 25
Archer Platform 6.x before 6.13 P2 (6.13.0.2) contains an authenticated HTML content injection vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00463 · Published 2023-12-12 · No fix listed CWE-79
Priority LOW 25
Cross Site Scripting (XSS) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows a remote authenticated attacker to execute arbitrary code via a crafted malicious script.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00505 · Published 2023-07-14 · No fix listed CWE-79
Priority LOW 24
An issue was discovered in Archer Platform 6 before 2024.06.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00288 · Published 2024-07-25 · No fix listed CWE-79
Load more
THREATIST.IORead the docs