CVE-2018-11059

RSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When application users access the corrupted data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application.

• CWE-79

• http://seclists.org/fulldisclosure/2018/Jul/69Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/104892Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041359Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Jul/69Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/104892Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041359Third Party Advisory, VDB Entry

Published

Jul 24, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11053Dell EMC iDRAC Service Module for all supported Linux and Xe…6.5
• CVE-2018-11054RSA BSAFE Micro Edition Suite, version 4.1.6, contains an in…7.5
• CVE-2018-11055RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in …5.5
• CVE-2018-11056RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), …6.5
• CVE-2018-11057RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in …5.9
• CVE-2018-11058RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in …9.8
• CVE-2018-1106An authentication bypass flaw has been found in PackageKit b…
• CVE-2018-11060RSA Archer, versions prior to 6.4.0.1, contain an authorizat…8.8
• CVE-2018-11061RSA NetWitness Platform versions prior to 11.1.0.2 and RSA S…9.1
• CVE-2018-11062Integrated Data Protection Appliance versions 2.0, 2.1, and …
• CVE-2018-11063Dell WMS versions 1.1 and prior are impacted by multiple unq…
• CVE-2018-11064Dell EMC Unity OE versions 4.3.0.x and 4.3.1.x and UnityVSA …7.8