CVE-2017-14370

RSA Archer GRC Platform prior to 6.2.0.5 is affected by stored cross-site scripting via the Source Asset ID field. An authenticated attacker may potentially exploit this to execute arbitrary HTML in the user's browser session in the context of the affected RSA Archer application.

• CWE-79

• http://seclists.org/fulldisclosure/2017/Oct/12Mailing List, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039518Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2017/Oct/12Mailing List, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039518Third Party Advisory, VDB Entry

Published

Oct 11, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14359A potential security vulnerability has been identified in HP…
• CVE-2017-14360A potential security vulnerability has been identified in HP…5.9
• CVE-2017-14361Man-In-The-Middle vulnerability in Micro Focus Project and P…7.4
• CVE-2017-14362Cross-Site Request Forgery vulnerability in Micro Focus Proj…7.3
• CVE-2017-14363Cross-Site Scripting (XSS) vulnerability has been identified…5.9
• CVE-2017-14369RSA Archer GRC Platform prior to 6.2.0.5 is affected by a pr…
• CVE-2017-14371RSA Archer GRC Platform prior to 6.2.0.5 is affected by refl…
• CVE-2017-14372RSA Archer GRC Platform prior to 6.2.0.5 is affected by refl…
• CVE-2017-14373EMC RSA Authentication Manager 8.2 SP1 P4 and earlier contai…
• CVE-2017-14374The SMI-S service in Dell Storage Manager versions earlier t…
• CVE-2017-14375EMC Unisphere for VMAX Virtual Appliance (vApp) versions pri…
• CVE-2017-14376EMC AppSync Server prior to 3.5.0.1 contains database accoun…