XSS in Emc Rsa Archer Egrc

CVE-2013-0933

Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.009 (57.4th percentile) — read the EPSS interpretation.

Affected products

Emc Rsa_archer_egrc — versions 5.0, 5.1, 5.2
Emc Rsa_archer_smartsuite — versions 4.3, 4.5
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)