Emc Rsa Archer vulnerabilities

2 CVEs affecting Emc Rsa Archer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1220, published 2018-03-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-1219, published 2018-03-08. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. EMC RSA Archer, versions prior to 6.2.0.8, contains an improper access control vulnerability on an API which is used to enumerate user information. A remote authenticated malicious user can…
CVE-2018-1220, published 2018-03-08. Medium severity, CVSS 6.1. EPSS: 1.7% chance of exploitation in the next 30 days. EMC RSA Archer, versions prior to 6.2.0.8, contains a redirect vulnerability in the QuickLinks feature. A remote attacker may potentially exploit this vulnerability to redirect genuine users to…