CVE-2022-37318

Archer Platform 6.9 SP2 P2 before 6.11 P3 (6.11.0.3) contain a reflected XSS vulnerability. A remote unauthenticated malicious Archer user could potentially exploit this vulnerability by tricking a victim application user into supplying malicious JavaScript code to the vulnerable web application. This code is then reflected to the victim and gets executed by the web browser in the context of the vulnerable web application. 6.10 P4 (6.10.0.4) and 6.11 P2 HF4 (6.11.0.2.4) are also fixed releases.

• CWE-79

• https://archerirm.comProduct
• https://www.archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/682060Vendor Advisory
• https://archerirm.comProduct
• https://www.archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/682060Vendor Advisory

Published

Aug 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-37311OX App Suite through 7.10.6 has Uncontrolled Resource Consum…5.3
• CVE-2022-37312OX App Suite through 7.10.6 has Uncontrolled Resource Consum…5.3
• CVE-2022-37313OX App Suite through 7.10.6 allows SSRF because the anti-SSR…5.3
• CVE-2022-37315graphql-go (aka GraphQL for Go) through 0.8.0 has infinite r…7.5
• CVE-2022-37316Archer Platform 6.8 before 6.11 P3 (6.11.0.3) contains an im…6.5
• CVE-2022-37317Archer Platform 6.x before 6.11 P3 contain an HTML injection…5.4
• CVE-2022-3732A vulnerability was found in seccome Ehoney and classified a…9.8
• CVE-2022-37325In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 1…7.5
• CVE-2022-37326Docker Desktop for Windows before 4.6.0 allows attackers to …7.8
• CVE-2022-37327Improper input validation in BIOS firmware for Intel(R) NUC,…5.5
• CVE-2022-37328Authenticated (author+) Stored Cross-Site Scripting (XSS) vu…5.4
• CVE-2022-37329Uncontrolled search path in some Intel(R) Quartus(R) Prime P…7.3