XSS in Emc Rsa Archer Egrc
CVE-2012-1064
Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.014 (69.0th percentile) — read the EPSS interpretation.
Affected products
- Emc Rsa_archer_egrc — versions 5.0, 5.1, 5.2
- Emc Rsa_archer_smartsuite — versions 4.3, 4.5
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)