Unscored severity · published May 22, 2013
CVE-2013-0942
Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Agent 7.1 before 7.1.1 for Web for Internet Information Services, and 7.1 before 7.1.1 for Web for Apache,…
–
CVSS
2.4%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Agent 7.1 before 7.1.1 for Web for Internet Information Services, and 7.1 before 7.1.1 for Web for Apache, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
Rsa Authentication Agent · Emc
7.1; 7.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0942
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0942
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2013-05/0043.html
More from Rsa Authentication Agent
–
CVE-2013-3280
EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design, which allows remote attackers to bypass intended access…
–
CVE-2013-3271
EMC RSA Authentication Agent for PAM 7.0 before 7.0.2.1 enforces the maximum number of login attempts within the PAM-enabled application codebase, instead of within the Agent…
–
CVE-2012-2287
The authentication functionality in EMC RSA Authentication Agent 7.1 and RSA Authentication Client 3.5 on Windows XP and Windows Server 2003, when an unspecified configuration…