CVE-2018-11065

Severity: medium (CVSS 4.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-08-24 · updated 2026-06-17
Weakness: CWE-89

Description

The WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 and 6.4.x prior to 6.4.0.1, contains a SQL injection vulnerability. A malicious user could potentially exploit this vulnerability to execute SQL commands on the back-end database to read certain data. Embedded WorkPoint is upgraded to version 4.10.16, which contains a fix for the vulnerability.

Affected products

Dell RSA Archer: from 6.1.0.0 before 6.1.0.3; from 6.2.0.0 before 6.2.0.10; from 6.3.0.0 before 6.3.0.7; from 6.4.0.0 before 6.4.0.1 — fixed in 6.1.0.3, 6.2.0.10, 6.3.0.7, 6.4.0.1

How to fix

Upgrade to a fixed version: Dell RSA Archer 6.1.0.3, 6.2.0.10, 6.3.0.7, 6.4.0.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2018-11065 or the next vulnerability affects your stack