CVE-2020-26884: Medium severity rsa archer grc platform vulnerability
RSA Archer 6.8 through 6.8.0.3 and 6.9 contains a URL injection vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability by tricking a victim application user into executing malicious JavaScript code in the context of the web application.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-26884?
CVE-2020-26884 is a URL injection vulnerability found in RSA Archer versions 6.8 through 6.8.0.3 and 6.9.
How severe is CVE-2020-26884?
CVE-2020-26884 has a severity rating of 6.1, which is considered medium.
What is RSA Archer?
RSA Archer is a software platform used for governance, risk management, and compliance.
How does CVE-2020-26884 exploit the vulnerability?
CVE-2020-26884 can be exploited by tricking a victim application user into executing malicious JavaScript code in the context of the RSA Archer web application.
How can I mitigate the vulnerability in RSA Archer?
To mitigate the vulnerability in RSA Archer, it is recommended to update to a version that is not affected by CVE-2020-26884.