Unscored severity · published Apr 30, 2008
CVE-2008-2026
Cross-site scripting (XSS) vulnerability in WebID/IISWebAgentIF.dll in RSA Authentication Agent 5.3.0.258, and other versions before 5.3.3.378, allows remote attackers to inject…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in WebID/IISWebAgentIF.dll in RSA Authentication Agent 5.3.0.258, and other versions before 5.3.3.378, allows remote attackers to inject arbitrary web script or HTML via a URL-encoded postdata parameter. NOTE: this is different than CVE-2005-1118, but it might be the same as CVE-2008-1470.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Authentication Agent · Rsa
through 5.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2026
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2026
Vendor Advisory
http://secunia.com/advisories/14954
securityreason.com
http://securityreason.com/securityalert/3848
www.securityfocus.com
http://www.securityfocus.com/archive/1/491247/100/0/threaded
www.securitytracker.com
http://www.securitytracker.com/id?1019920
More from Authentication Agent
–
CVE-2013-0941
EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before…
–
CVE-2008-2027
Open redirect vulnerability in WebID/IISWebAgentIF.dll in RSA Authentication Agent 5.3.0.258 for Web for IIS, when accessed via certain browsers such as Mozilla Firefox, allows…