Unscored severity · published Oct 10, 2012
CVE-2012-2286
Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 before SP3 P3 allows remote attackers to obtain sensitive information via unknown vectors
–
CVSS
0.6%
EPSS
No
On KEV
Description
Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 before SP3 P3 allows remote attackers to obtain sensitive information via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 46% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
Rsa Adaptive Authentication On-premise · Emc
through 6.0.2.1; 2.0; 5.7.0; 5.7.2; 5.7.3; 6.0; +5 more · source: NVD
Affected product
RA
Rsa Adaptive Authentication On-premise
Emc
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2286
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2286
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2012-10/0036.html
www.securityfocus.com
http://www.securityfocus.com/bid/55842
More from Rsa Adaptive Authentication On-premise
5.4
CVE-2016-0925
Cross-site scripting (XSS) vulnerability in the Case Management application in EMC RSA Adaptive Authentication (On-Premise) before 6.0.2.1.SP3.P4 HF210, 7.0.x and 7.1.x before…
–
CVE-2014-4631
RSA Adaptive Authentication (On-Premise) 6.0.2.1 through 7.1 P3, when using device binding in a Challenge SOAP call or using the RSA Adaptive Authentication Integration Adapters…
–
CVE-2014-0638
Cross-site scripting (XSS) vulnerability in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML…
–
CVE-2014-0637
Cross-site scripting (XSS) vulnerability in the back-office case-management application in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote…
–
CVE-2012-4611
Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Adaptive Authentication On-Premise (AAOP) before 7.0 allow remote attackers to inject arbitrary web script or HTML…