CVE-2024-49210mediumCWE-79

CVE-2024-49210

Publicada el · Actualizada el

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.2epss 0.3%
probabilidad de explotación
0.3%top 72% de las CVE
explotación observada
noninguna fuente lo reporta
Reflected XSS was discovered in an iView List Archer Platform UX page in Archer Platform 6.x before version 2024.09. A remote unauthenticated attacker could potentially exploit this by tricking a victim application user into supplying malicious HTML or JavaScript code to the vulnerable web application; the malicious code is then reflected back to the victim and executed by the web browser in the context of the vulnerable web application.
CVSS:3.1/AC:L/AV:N/A:N/C:H/I:L/PR:H/S:U/UI:R
Productos afectados
n/a · n/a
Referencias
https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/747545https://www.archerirm.community/t5/platform-announcements/tkb-p/product-advisories-tkb