CVE-2017-14371

CVE-2017-14371 describes a reflected cross-site scripting (XSS) vulnerability in RSA Archer GRC Platform versions prior to 6.2.0.5, where malicious scripts can be injected via the request URL. This medium-severity vulnerability (CVSS 6.1) allows an unauthenticated attacker to execute arbitrary HTML in a user's browser session, potentially leading to information disclosure or session hijacking. While the attack complexity is low, user interaction is required for exploitation. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.