Is CVE-2020-5336 being actively exploited?

CVE-2020-5336 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2020-5336?

CVE-2020-5336 has a CVSS 3.1 base score of 4.6 (MEDIUM).

CVE-2020-5336

MEDIUM · CVSS 4.6EPSS 0.7%EU EUVD

RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability. An unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to execute malicious JavaScript code on the affected system.

Key facts

CVSS score: 4.6 (v3.1)
Severity: MEDIUM
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Weakness (CWE): CWE-79
EPSS score: 0.7% (52th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2020-26518)
Published: May 4, 2020
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2020-26518 in the EU Vulnerability Database. Last updated in EUVD on September 17, 2024.

View on the EU Vulnerability Database

Affected products

rsa / archer

Certified products that may be affected

3 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

RSA Archer Suite v6.7 - RSA Security LLC - Common Criteria ISCB-5-RPT-C113-CR-v1 - archived
RSA Archer Suite v6.5 - RSA Security LLC - Common Criteria ISCB-5-RPT-C107-CR-v1 - archived
RSA Archer Suite v6.3 - RSA Security LLC - Common Criteria ISCB-5-RPT-C095-CR-v1 - archived

References

https://www.dell.com/support/security/en-us/details/DOC-111112/DSA-2020-049-RSA-Archer-Security-Update-for-Multiple-Vulnerabilities(Third Party Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain