CVE-2018-11065

LOW

RSA Archer 6.1.0.0-6.1.0.3 - SQL Injection in WorkPoint Component

Title source: llm

Description

The WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 and 6.4.x prior to 6.4.0.1, contains a SQL injection vulnerability. A malicious user could potentially exploit this vulnerability to execute SQL commands on the back-end database to read certain data. Embedded WorkPoint is upgraded to version 4.10.16, which contains a fix for the vulnerability.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1041540

Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc

http://seclists.org/fulldisclosure/2018/Aug/31

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/105128

Scores

CVSS v3 2.7

EPSS 0.0129

EPSS Percentile 67.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-89

Status published

Products (1)

rsa/archer 6.1.0.0 - 6.1.0.3

Published Aug 24, 2018

Tracked Since Feb 18, 2026