CVE-2014-2505 Code injection in n/a

What is CVE-2014-2505?

CVE-2014-2505 is a medium-severity code injection vulnerability in n/a, published on 20 Aug 2014. It can be exploited over the network.

Official description

EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to trigger the download of arbitrary code, and consequently change the product's functionality, via unspecified vectors.

Which versions are affected by CVE-2014-2505?

It affects 1 product.

Products include Emc Rsa Archer Egrc.

How do I fix CVE-2014-2505?

No fix has been published for CVE-2014-2505 yet. Limit exposure of the affected software until one is available.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2014-2505 being exploited?

There is no known exploitation of CVE-2014-2505 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2017-4998 Cross-site request forgery in RSA Archer version 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 High 8.8
• CVE-2012-2292 Security feature bypass in n/a High 7.5
• CVE-2015-0542 Cross-site request forgery in n/a Medium 6.8
• CVE-2014-0641 Cross-site request forgery in n/a Medium 6.8
• CVE-2012-2294 Other in n/a Medium 6.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-2fvj-2r46-pgcr.