CVE-2018-11065: The WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 and 6.4.x prior to 6.4.0.1, contains a SQL…

PriorityP429medium4.3CVSS 3.0

AVNACLPRLUINSUCLINAN

EPSS

1.29%

68.9th percentile

The WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 and 6.4.x prior to 6.4.0.1, contains a SQL injection vulnerability. A malicious user could potentially exploit this vulnerability to execute SQL commands on the back-end database to read certain data. Embedded WorkPoint is upgraded to version 4.10.16, which contains a fix for the vulnerability.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
dell_emc	rsa_archer	—	—
dell_emc	rsa_archer	>= 6.3.x < 6.3.0.7	6.3.0.7
dell_emc	rsa_archer	>= 6.4.x < 6.4.0.1	6.4.0.1
rsa	archer	>= 6.1.0.0 < 6.1.0.3	6.1.0.3
rsa	archer	>= 6.2.0.0 < 6.2.0.10	6.2.0.10
rsa	archer	>= 6.3.0.0 < 6.3.0.7	6.3.0.7
rsa	archer	>= 6.4.0.0 < 6.4.0.1	6.4.0.1

CVSS provenance

nvdv3.04.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.