What’s Vulnerable › Vulnerabilities

CVE-2022-26947

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-03-30 · updated 2026-06-17
• Weakness: CWE-79

Description

Archer 6.x through 6.9 SP3 (6.9.3.0) contains a reflected XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability by tricking a victim application user into supplying malicious HTML or JavaScript code to the vulnerable web application; the malicious code is then reflected back to the victim and gets executed by the web browser in the context of the vulnerable web application.

Affected products

• Dell RSA Archer: from 6.1.0.0 before 6.9.3.1 — fixed in 6.9.3.1

How to fix

Upgrade to a fixed version: Dell RSA Archer 6.9.3.1. Check the vendor advisory for mitigations.

References

• https://www.archerirm.community/t5/general-support-information/tkb-p/information-support
• https://www.archerirm.community/t5/security-advisories/archer-an-rsa-business-update-for-multiple-vulnerabilities/ta-p/674497
• https://www.archerirm.community/t5/general-support-information/tkb-p/information-support
• https://www.archerirm.community/t5/security-advisories/archer-an-rsa-business-update-for-multiple-vulnerabilities/ta-p/674497

Get alerted when CVE-2022-26947 or the next vulnerability affects your stack