Unscored severity · published Nov 22, 2013
CVE-2013-3288
Cross-site scripting (XSS) vulnerability on the EMC RSA Data Protection Manager (DPM) appliance 3.2.x before 3.2.4.2 and 3.5.x before 3.5.1 allows remote attackers to inject…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability on the EMC RSA Data Protection Manager (DPM) appliance 3.2.x before 3.2.4.2 and 3.5.x before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RD
Rsa Data Protection Manager Appliance · Emc
3.2; 3.2.1; 3.2.2; 3.2.3; 3.2.4.1; 3.5 · source: NVD
Affected product
RD
Rsa Data Protection Manager Appliance
Emc
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-3288
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-3288
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2013-11/0120.html
More from Rsa Data Protection Manager Appliance
–
CVE-2012-4613
EMC RSA Data Protection Manager Appliance 2.7.x and 3.x before 3.2.1 does not properly restrict the number of authentication attempts by a user account, which makes it easier for…
–
CVE-2012-4612
Cross-site scripting (XSS) vulnerability in EMC RSA Data Protection Manager Appliance and Software Server 2.7.x and 3.x before 3.2.1 allows remote attackers to inject arbitrary…