Archer Technologies Archer 2024.03
Approved changes feed: RSS · Atom
cpe:2.3:a:archerirm:archer:2024.03:*:*:*:*:*:*:*
part: a version: 2024.03 update: *
| Vendor | Archerirm (1199a26e-c90a-5654-82d5-b6910d2801e8) |
|---|---|
| Product | Archer (fbb84c7c-1913-5161-a901-42cf28102a18) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-34092 |
vulnerable | 2026-06-08 06:37:32.660979 |
Details available
An issue was discovered in Archer Platform 6 before 2024.04. Authentication was mishandled because lock did not terminate an existing session. 6.14 P3 (6.14.0.3) is also a fixed release.
Published: 2024-05-06T00:00:00.000Z
Updated: 2025-03-25T16:17:57.753Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34091 |
vulnerable | 2026-06-08 06:37:32.660648 |
Details available
HIGH (7.3)
An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting (XSS) vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the malicious code gets executed in the background of the application and renders content inaccessible. 6.14 P3 (6.14.0.3) is also a fixed release.
Published: 2024-05-06T00:00:00.000Z
Updated: 2024-08-02T02:43:00.166Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34090 |
vulnerable | 2026-06-08 06:37:32.660224 |
Details available
HIGH (7.3)
An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting (XSS) vulnerability. The login banner in the Archer Control Panel (ACP) did not previously escape content appropriately. 6.14 P3 (6.14.0.3) is also a fixed release.
Published: 2024-05-06T00:00:00.000Z
Updated: 2024-11-01T19:42:36.007Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34089 |
vulnerable | 2026-06-08 06:37:32.659528 |
Details available
HIGH (7.3)
An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting (XSS) vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application. 6.14 P3 (6.14.0.3) is also a fixed release.
Published: 2024-05-06T00:00:00.000Z
Updated: 2025-03-28T18:38:18.516Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.