First published: Fri Dec 12 2014(Updated: )
Cross-site scripting (XSS) vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Credit: security_alert@emc.com
Affected Software | Affected Version | How to fix |
---|---|---|
EMC RSA Archer | =5.0 | |
EMC RSA Archer | =5.1 | |
EMC RSA Archer | =5.2 | |
EMC RSA Archer | =5.3 | |
EMC RSA Archer | =5.4 | |
EMC RSA Archer | =5.5 | |
EMC RSA Archer | =5.5.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-4633 is considered a moderate severity vulnerability due to its potential for cross-site scripting attacks.
To fix CVE-2014-4633, update your EMC RSA Archer GRC Platform to version 5.5.1.1 or later.
CVE-2014-4633 allows attackers to perform cross-site scripting, injecting arbitrary web scripts or HTML into the platform.
CVE-2014-4633 affects EMC RSA Archer GRC Platform versions 5.0 to 5.5, excluding 5.5.1.1 and later.
The potential impact of CVE-2014-4633 includes session hijacking, data theft, or malicious actions executed on behalf of the user.