CVE-2022-37317

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-08-25 · updated 2026-06-17
Weakness: CWE-79

Description

Archer Platform 6.x before 6.11 P3 contain an HTML injection vulnerability. An authenticated remote attacker could potentially exploit this vulnerability by tricking a victim application user to execute malicious code in the context of the web application. 6.10 P4 (6.10.0.4) and 6.11 P2 HF4 (6.11.0.2.4) are also fixed releases.

Affected products

Dell RSA Archer: from 6.0 before 6.10.0.4; from 6.11 before 6.11.0.2.4 — fixed in 6.10.0.4, 6.11.0.2.4

How to fix

Upgrade to a fixed version: Dell RSA Archer 6.10.0.4, 6.11.0.2.4. Check the vendor advisory for mitigations.

References

https://archerirm.com
https://www.archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/682060
https://archerirm.com
https://www.archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/682060

Get alerted when CVE-2022-37317 or the next vulnerability affects your stack