Unscored severity · published Nov 26, 2010
CVE-2008-7266
Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in RSA Adaptive Authentication 2.x and 5.7.x allows remote attackers to inject arbitrary web script…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in RSA Adaptive Authentication 2.x and 5.7.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Adaptive Authentication · Rsa
2.0; 5.7.0; 5.7.2; 5.7.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-7266
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-7266
Vendor Advisory
http://secunia.com/advisories/42332
www.securityfocus.com
http://www.securityfocus.com/archive/1/514869/100/0/threaded
www.securitytracker.com
http://www.securitytracker.com/id?1024775
Vendor Advisory
http://www.vupen.com/english/advisories/2010/3055
knowledge.rsasecurity.com
https://knowledge.rsasecurity.com/scolcms/set.aspx?id=8192