Medium severity5.4NVD Advisory· Published May 26, 2021· Updated Jun 17, 2026

CVE-2021-29252

Description

RSA Archer before 6.9 SP1 P1 (6.9.1.1) contains a stored XSS vulnerability. A remote authenticated malicious Archer user with access to modify link name fields could potentially exploit this vulnerability to execute code in a victim's browser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Rsa/Archer2 versions
cpe:2.3:a:rsa:archer:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:rsa:archer:*:*:*:*:*:*:*:*range: >=6.6,<6.6.0.8
- (no CPE)range: <6.9 SP1 P1
RSA/RSA Archerdescription

Patches

Vulnerability mechanics

References

community.rsa.com/t5/archer-product-advisories/rsa-2021-04-archer-an-rsa-business-update-for-multiple/ta-p/603223nvdVendor Advisory
www.rsa.com/en-us/company/vulnerability-response-policynvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000