CVE-2021-33616: XSS
First published: Mon Apr 04 2022(Updated: )
RSA Archer 6.x through 6.9 SP1 P4 (6.9.1.4) allows stored XSS.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| RSA Archer | >=6.1.0.0<=6.9.1.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://community.rsa.com/t5/archer-product-advisories/tkb-p/archer-product-advisories
- https://github.com/fireeye/Vulnerability-Disclosures
- https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0020/MNDT-2022-0020.md
- https://www.archerirm.community/t5/security-advisories/archer-an-rsa-business-update-for-multiple-vulnerabilities/ta-p/674497
Frequently Asked Questions
What is CVE-2021-33616?
CVE-2021-33616 is a vulnerability in RSA Archer 6.x through 6.9 SP1 P4 (6.9.1.4) that allows stored XSS (Cross-Site Scripting) attacks.
How does CVE-2021-33616 affect RSA Archer?
CVE-2021-33616 affects RSA Archer 6.x through 6.9 SP1 P4 (6.9.1.4) by allowing attackers to execute malicious scripts in the context of a user's browser.
What is the severity of CVE-2021-33616?
CVE-2021-33616 has a severity level of medium with a CVSS score of 5.4.
How can I fix CVE-2021-33616?
To fix CVE-2021-33616, RSA Archer users should update to the latest version (6.9.1.4) or apply the necessary patches provided by RSA.
Where can I find more information about CVE-2021-33616?
More information about CVE-2021-33616 can be found in the RSA Archer Product Advisories and the Vulnerability-Disclosures repositories on GitHub.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/rsa
- canonical/rsa archer
- version/rsa archer/6.1.0.0
- version/rsa archer/6.9.1.4