CVE-2020-29535

Archer before 6.8 P4 (6.8.0.4) contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When application users access the corrupted data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application.

• CWE-79

• https://community.rsa.com/docs/DOC-115223Vendor Advisory
• https://www.rsa.com/en-us/company/vulnerability-response-policyVendor Advisory
• https://community.rsa.com/docs/DOC-115223Vendor Advisory
• https://www.rsa.com/en-us/company/vulnerability-response-policyVendor Advisory

Published

Jan 29, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-29510The encoding/xml package in Go versions 1.15 and earlier doe…5.6
• CVE-2020-29511The encoding/xml package in Go (all versions) does not corre…5.6
• CVE-2020-2952Vulnerability in the Oracle HTTP Server product of Oracle Fu…6.5
• CVE-2020-29529HashiCorp go-slug up to 0.4.3 did not fully protect against …7.5
• CVE-2020-2953Vulnerability in the Oracle Retail Customer Management and S…9.8
• CVE-2020-29534An issue was discovered in the Linux kernel before 5.9.3. io…7.8
• CVE-2020-29536Archer before 6.8 P2 (6.8.0.2) is affected by a path exposur…4.3
• CVE-2020-29537Archer before 6.8 P2 (6.8.0.2) is affected by an open redire…5.4
• CVE-2020-29538Archer before 6.9 P1 (6.9.0.1) contains an improper access c…4.9
• CVE-2020-29539A Cross-Site Scripting (XSS) issue in WebUI Translation in S…5.4
• CVE-2020-2954Vulnerability in the PeopleSoft Enterprise HRMS product of O…6.1
• CVE-2020-29540API calls in the Translation API feature in Systran Pure Neu…7.5