Unscored severity · published Dec 9, 2013
CVE-2013-6180
EMC RSA Security Analytics (SA) 10.x before 10.3, and RSA NetWitness NextGen 9.8, does not ensure that SA Core requests originate from the SA REST UI, which allows remote…
–
CVSS
1.8%
EPSS
No
On KEV
Description
EMC RSA Security Analytics (SA) 10.x before 10.3, and RSA NetWitness NextGen 9.8, does not ensure that SA Core requests originate from the SA REST UI, which allows remote attackers to bypass intended access restrictions by sending a Core request from a web browser or other unintended user agent.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RN
Rsa Netwitness Nextgen · Emc
9.8 · source: NVD
RS
Rsa Security Analytics · Emc
10.0; 10.1; 10.2 · source: NVD