NetSight
medium6.1

CVE-2020-26884

RSA Archer 6.8 through 6.8.0.3 and 6.9 contains a URL injection vulnerability.

Impact

RSA Archer 6.8 through 6.8.0.3 and 6.9 contains a URL injection vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability by tricking a victim application user into executing malicious JavaScript code in the context of the web application.

Affected products

VendorProductAffected versions
RsaArcher
from 6.8 through 6.8.0.3
Version 6.9

Weakness classification

References