Skip to content
Noroxi

archerirm records

28 published records for vendor archerirm.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
3.6%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24
  3. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

28 records
  • CVE-2023-48641
    35Monitor

    Archer Platform 6.x before 6.14 P1 HF2 (6.14.0.1.2) contains an insecure direct object reference vulnerability.

    HighCVSS 8.8No exploitEPSS 0%

    archerirm · archerDec 12, 2023

  • CVE-2024-34092
    35Monitor

    An issue was discovered in Archer Platform 6 before 2024.04.

    HighCVSS 8.8No exploitEPSS 0%

    archerirm · archerMay 6, 2024

  • CVE-2023-32761
    32Monitor

    Cross Site Request Forgery (CSRF) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows an authenticate

    HighCVSS 8.0No exploitEPSS 0%

    archerirm · archerJul 14, 2023

  • CVE-2024-26309
    30Monitor

    Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a sensitive information disclosure vulnerability.

    HighCVSS 7.5No exploitEPSS 0%

    archerirm · archerMar 7, 2024

  • CVE-2023-32759
    26Monitor

    An issue in Archer Platform before v.6.13 and fixed in 6.12.0.6 and 6.13.0 allows an authenticated attacker to obtain sensitive information

    MediumCVSS 6.5No exploitEPSS 0%

    archerirm · archerJul 14, 2023

  • CVE-2023-45357
    26Monitor

    Archer Platform 6.x before 6.13 P2 HF2 (6.13.0.2.2) contains a sensitive information disclosure vulnerability.

    MediumCVSS 6.5No exploitEPSS 0%

    archerirm · archerOct 17, 2023

  • CVE-2023-32760
    26Monitor

    An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information

    MediumCVSS 6.5No exploitEPSS 0%

    archerirm · archerJul 14, 2023

  • CVE-2024-49210
    24Monitor

    Reflected XSS was discovered in an iView List Archer Platform UX page in Archer Platform 6.x before version 2024.09.

    MediumCVSS 6.1No exploitEPSS 0%

    archerirm · archerOct 22, 2024

  • CVE-2024-49211
    24Monitor

    Reflected XSS was discovered in a Dashboard Listing Archer Platform UX page in Archer Platform 6.x before version 2024.08.

    MediumCVSS 6.1No exploitEPSS 0%

    archerirm · archerOct 22, 2024

  • CVE-2024-26311
    22Monitor

    Archer Platform 6.x before 6.14 P2 HF1 (6.14.0.2.1) contains a reflected XSS vulnerability.

    MediumCVSS 5.7No exploitEPSS 0%

    archerirm · archerFeb 21, 2024

  • CVE-2023-37224
    22Monitor

    An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information

    MediumCVSS 5.5No exploitEPSS 0%

    archerirm · archerJul 14, 2023

  • CVE-2024-34091
    21Monitor

    An issue was discovered in Archer Platform 6 before 2024.04.

    MediumCVSS 5.4No exploitEPSS 0%

    archerirm · archerMay 6, 2024

  • CVE-2023-37223
    21Monitor

    Cross Site Scripting (XSS) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows a remote authenticated

    MediumCVSS 5.4No exploitEPSS 0%

    archerirm · archerJul 14, 2023

  • CVE-2024-26313
    21Monitor

    Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a stored cross-site scripting (XSS) vulnerability.

    MediumCVSS 5.4No exploitEPSS 0%

    archerirm · archerMar 7, 2024

  • CVE-2023-45358
    21Monitor

    Archer Platform 6.x before 6.13 P2 HF2 (6.13.0.2.2) contains a stored cross-site scripting (XSS) vulnerability.

    MediumCVSS 5.4No exploitEPSS 0%

    archerirm · archerOct 17, 2023

  • CVE-2023-48642
    21Monitor

    Archer Platform 6.x before 6.13 P2 (6.13.0.2) contains an authenticated HTML content injection vulnerability.

    MediumCVSS 5.4No exploitEPSS 0%

    archerirm · archerDec 12, 2023

  • CVE-2024-34089
    21Monitor

    An issue was discovered in Archer Platform 6 before 2024.04.

    MediumCVSS 5.4No exploitEPSS 0%

    archerirm · archerMay 6, 2024

  • CVE-2024-34093
    21Monitor

    An issue was discovered in Archer Platform 6 before 2024.03.

    MediumCVSS 5.3No exploitEPSS 0%

    archerirm · archerMay 6, 2024

  • CVE-2024-34090
    21Monitor

    An issue was discovered in Archer Platform 6 before 2024.04.

    MediumCVSS 5.4No exploitEPSS 0%

    archerirm · archerMay 6, 2024

  • CVE-2024-41706
    21Monitor

    A stored XSS issue was discovered in Archer Platform 6 before version 2024.06.

    MediumCVSS 5.4No exploitEPSS 0%

    archerirm · archerJul 25, 2024

  • CVE-2023-30639
    21Monitor

    Archer Platform 6.8 before 6.12 P6 HF1 (6.12.0.6.1) contains a stored XSS vulnerability.

    MediumCVSS 5.4No exploitEPSS 0%

    archerirm · archerMay 1, 2023

  • CVE-2024-41705
    21Monitor

    A stored XSS issue was discovered in Archer Platform 6.8 before 2024.06.

    MediumCVSS 5.4No exploitEPSS 0%

    archerirm · archerJul 25, 2024

  • CVE-2024-41707
    21Monitor

    An issue was discovered in Archer Platform 6 before 2024.06.

    MediumCVSS 5.4No exploitEPSS 0%

    archerirm · archerJul 25, 2024

  • CVE-2024-26312
    17Monitor

    Archer Platform 6 before 2024.03 contains a sensitive information disclosure vulnerability.

    MediumCVSS 4.3No exploitEPSS 0%

    archerirm · archerMay 6, 2024

  • CVE-2025-27893
    17Monitor

    In Archer Platform 6 through 6.14.00202.10024, an authenticated user with record creation privileges can manipulate immutable fields, such a

    MediumCVSS 4.3Proof of conceptEPSS 0%

    archerirm · archerMar 11, 2025