Back to Database
Status published
Medium
CVE-2021-29252
RSA Archer before 6.9 SP1 P1 (6.9.1.1) contains a stored...
Vulnerability Description
RSA Archer before 6.9 SP1 P1 (6.9.1.1) contains a stored XSS vulnerability. A remote authenticated malicious Archer user with access to modify link name fields could potentially exploit this vulnerability to execute code in a victim's browser.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-29252
Credits & Attribution
No credits recorded in the NVD database.
References
More from rsa
View All →CVE-2022-47529
Insecure Win32 memory objects in Endpoint Windows Agents in RSA...
Medium
6.7
CVE-2022-37318
Archer Platform 6.9 SP2 P2 before 6.11 P3 (6.11.0.3) contain...
High
7
CVE-2022-37317
Archer Platform 6.x before 6.11 P3 contain an HTML injection...
High
7.6
CVE-2022-37316
Archer Platform 6.8 before 6.11 P3 (6.11.0.3) contains an improper...
Medium
6.5
CVE-2022-30585
The REST API in Archer Platform 6.x before 6.11 (6.11.0.0)...
Medium
6.5
Affected Vendor
Affected Software
archer
Vulnerable Versions:
6.6, 6.7, 6.8, 6.9
Timeline
Official Publish:
May 26th, 2021
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:L/S:U/UI:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.