CVE-2022-37317

Archer Platform 6.x before 6.11 P3 contain an HTML injection vulnerability. An authenticated remote attacker could potentially exploit this vulnerability by tricking a victim application user to execute malicious code in the context of the web application. 6.10 P4 (6.10.0.4) and 6.11 P2 HF4 (6.11.0.2.4) are also fixed releases.

• CWE-79

• https://archerirm.comProduct
• https://www.archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/682060Vendor Advisory
• https://archerirm.comProduct
• https://www.archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/682060Vendor Advisory

Published

Aug 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-37310OX App Suite through 7.10.6 allows XSS via a malicious capab…6.1
• CVE-2022-37311OX App Suite through 7.10.6 has Uncontrolled Resource Consum…5.3
• CVE-2022-37312OX App Suite through 7.10.6 has Uncontrolled Resource Consum…5.3
• CVE-2022-37313OX App Suite through 7.10.6 allows SSRF because the anti-SSR…5.3
• CVE-2022-37315graphql-go (aka GraphQL for Go) through 0.8.0 has infinite r…7.5
• CVE-2022-37316Archer Platform 6.8 before 6.11 P3 (6.11.0.3) contains an im…6.5
• CVE-2022-37318Archer Platform 6.9 SP2 P2 before 6.11 P3 (6.11.0.3) contain…6.1
• CVE-2022-3732A vulnerability was found in seccome Ehoney and classified a…9.8
• CVE-2022-37325In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 1…7.5
• CVE-2022-37326Docker Desktop for Windows before 4.6.0 allows attackers to …7.8
• CVE-2022-37327Improper input validation in BIOS firmware for Intel(R) NUC,…5.5
• CVE-2022-37328Authenticated (author+) Stored Cross-Site Scripting (XSS) vu…5.4