CVE-2021-29252: Rsa Archer

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

RSA Archer before 6.9 SP1 P1 (6.9.1.1) contains a stored XSS vulnerability. A remote authenticated malicious Archer user with access to modify link name fields could potentially exploit this vulnerability to execute code in a victim's browser.

Affected products

• Rsa Archer: from 6.6, before 6.6.0.8 (fixed in 6.6.0.8); from 6.7, before 6.7.0.8 (fixed in 6.7.0.8); from 6.8, before 6.8.0.5 (fixed in 6.8.0.5); from 6.9, before 6.9.1.1 (fixed in 6.9.1.1)

Published 2021-05-26. Last modified 2026-06-17.