https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-27893.htmlhttps://patchthecve.com/cve/CVE-2025-27893.htmlWed, 17 Jun 2026 09:04:21 +0000LOW 1.8: In Archer Platform 6 through 6.14.00202.10024, an authenticated user with record creation privileges can manipulate immutable fields, such as the creation date, by intercepting and modifying a Copy request via a GenericContent/Record.aspx?id= URI. NOTE: the Supplier analyzed the reported exploitatiohttps://patchthecve.com/cve/CVE-2024-41707.htmlhttps://patchthecve.com/cve/CVE-2024-41707.htmlWed, 17 Jun 2026 07:48:05 +0000MEDIUM 4.8: An issue was discovered in Archer Platform 6 before 2024.06. Authenticated users can achieve HTML content injection. A remote authenticated malicious Archer user could potentially exploit this to store malicious HTML code in a trusted application data store. When victim users access the data store thttps://patchthecve.com/cve/CVE-2024-41706.htmlhttps://patchthecve.com/cve/CVE-2024-41706.htmlWed, 17 Jun 2026 07:48:05 +0000HIGH 7.3: A stored XSS issue was discovered in Archer Platform 6 before version 2024.06. A remote authenticated malicious Archer user could potentially exploit this to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, thttps://patchthecve.com/cve/CVE-2024-41705.htmlhttps://patchthecve.com/cve/CVE-2024-41705.htmlWed, 17 Jun 2026 07:48:05 +0000HIGH 7.1: A stored XSS issue was discovered in Archer Platform 6.8 before 2024.06. A remote authenticated malicious Archer user could potentially exploit this to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the malhttps://patchthecve.com/cve/CVE-2024-34093.htmlhttps://patchthecve.com/cve/CVE-2024-34093.htmlWed, 17 Jun 2026 07:32:53 +0000MEDIUM 5.3: An issue was discovered in Archer Platform 6 before 2024.03. There is an X-Forwarded-For Header Bypass vulnerability. An unauthenticated attacker could potentially bypass intended whitelisting when X-Forwarded-For header is enabled.https://patchthecve.com/cve/CVE-2024-34092.htmlhttps://patchthecve.com/cve/CVE-2024-34092.htmlWed, 17 Jun 2026 07:32:53 +0000HIGH 8.8: An issue was discovered in Archer Platform 6 before 2024.04. Authentication was mishandled because lock did not terminate an existing session. 6.14 P3 (6.14.0.3) is also a fixed release.https://patchthecve.com/cve/CVE-2024-34091.htmlhttps://patchthecve.com/cve/CVE-2024-34091.htmlWed, 17 Jun 2026 07:32:53 +0000HIGH 7.3: An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting (XSS) vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When victhttps://patchthecve.com/cve/CVE-2024-34090.htmlhttps://patchthecve.com/cve/CVE-2024-34090.htmlWed, 17 Jun 2026 07:32:53 +0000HIGH 7.3: An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting (XSS) vulnerability. The login banner in the Archer Control Panel (ACP) did not previously escape content appropriately. 6.14 P3 (6.14.0.3) is also a fixed release.https://patchthecve.com/cve/CVE-2024-34089.htmlhttps://patchthecve.com/cve/CVE-2024-34089.htmlWed, 17 Jun 2026 07:32:53 +0000HIGH 7.3: An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting (XSS) vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When victhttps://patchthecve.com/cve/CVE-2024-26312.htmlhttps://patchthecve.com/cve/CVE-2024-26312.htmlWed, 17 Jun 2026 07:17:35 +0000MEDIUM 4.3: Archer Platform 6 before 2024.03 contains a sensitive information disclosure vulnerability. An authenticated attacker could potentially obtain access to sensitive information via a popup warning message.https://patchthecve.com/cve/CVE-2024-26313.htmlhttps://patchthecve.com/cve/CVE-2024-26313.htmlWed, 17 Jun 2026 07:17:36 +0000HIGH 7.3: Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a stored cross-site scripting (XSS) vulnerability. A remote authenticated malicious Archer user could potentially exploit this to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the dathttps://patchthecve.com/cve/CVE-2024-26309.htmlhttps://patchthecve.com/cve/CVE-2024-26309.htmlWed, 17 Jun 2026 07:17:35 +0000MEDIUM 5.3: Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a sensitive information disclosure vulnerability. An unauthenticated attacker could potentially obtain access to sensitive information via an internal URL.https://patchthecve.com/cve/CVE-2024-26311.htmlhttps://patchthecve.com/cve/CVE-2024-26311.htmlWed, 17 Jun 2026 07:17:35 +0000MEDIUM 5.7: Archer Platform 6.x before 6.14 P2 HF1 (6.14.0.2.1) contains a reflected XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this by tricking a victim application user into supplying malicious JavaScript code to the vulnerable web application. This code is then https://patchthecve.com/cve/CVE-2024-26310.htmlhttps://patchthecve.com/cve/CVE-2024-26310.htmlWed, 17 Jun 2026 07:17:35 +0000MEDIUM 4.3: Archer Platform 6.8 before 6.14 P2 (6.14.0.2) contains an improper access control vulnerability. A remote authenticated malicious user could potentially exploit this to gain access to API information that should only be accessible with extra privileges.