Cross-site scripting (XSS) vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-4559
http://archives.neohapsis.com/archives/bugtraq/2014-12/0073.html