Approved changes feed: RSS · Atom
cpe:2.3:a:archer:platform:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Archer (9ea995ee-2947-53d2-a448-053dd7714791) |
|---|---|
| Product | Platform (869f3be3-7a2c-57a4-8b2c-bf3425654020) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-34091 |
vulnerable | 2026-06-08 06:37:32.660572 |
Details available
HIGH (7.3)
An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting (XSS) vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the malicious code gets executed in the background of the application and renders content inaccessible. 6.14 P3 (6.14.0.3) is also a fixed release.
Published: 2024-05-06T00:00:00.000Z
Updated: 2024-08-02T02:43:00.166Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34089 |
vulnerable | 2026-06-08 06:37:32.657084 |
Details available
HIGH (7.3)
An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting (XSS) vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application. 6.14 P3 (6.14.0.3) is also a fixed release.
Published: 2024-05-06T00:00:00.000Z
Updated: 2025-03-28T18:38:18.516Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-26312 |
vulnerable | 2026-06-08 06:31:26.328197 |
Details available
Archer Platform 6 before 2024.03 contains a sensitive information disclosure vulnerability. An authenticated attacker could potentially obtain access to sensitive information via a popup warning message.
Published: 2024-05-06T00:00:00.000Z
Updated: 2024-08-02T00:07:19.186Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-26310 |
vulnerable | 2026-06-08 06:31:26.327293 |
Details available
MEDIUM (4.3)
Archer Platform 6.8 before 6.14 P2 (6.14.0.2) contains an improper access control vulnerability. A remote authenticated malicious user could potentially exploit this to gain access to API information that should only be accessible with extra privileges.
Published: 2024-02-21T00:00:00.000Z
Updated: 2024-08-28T14:55:21.205Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.