RA
Product
Rsa Authentication Manager
25
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 18Low 0
Watch
Add Rsa Authentication Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-3768 | 6.5 | Jan 3 | RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability Affected: before 8.4; 8.4; 8.4; 8.4; 8.4; 8.4; +2 more |
| CVE-2018-11074 | 6.1 | Sep 28 | RSA Authentication Manager versions prior to 8.3 P3 are affected by a DOM-based cross-site scripting vulnerability which exists in its embedded MadCap Flare Help files Affected: 8.3; 8.3 |
| CVE-2018-1254 | 6.1 | Jun 21 | RSA Authentication Manager Security Console, versions 8.3 P1 and earlier, contains a reflected cross-site scripting vulnerability Affected: through 8.3 |
| CVE-2018-1253 | 6.1 | Jun 21 | RSA Authentication Manager Operation Console, versions 8.3 P1 and earlier, contains a stored cross-site scripting vulnerability Affected: through 7.0; 7.1; 7.1; 7.1; 7.1; 8.0; +7 more |
| CVE-2017-14373 | 6.1 | Oct 31 | EMC RSA Authentication Manager 8.2 SP1 P4 and earlier contains a reflected cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise… Affected: through 8.2 |
| CVE-2016-0901 | 6.1 | May 7 | Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified… Affected: through 8.1 |
| CVE-2016-0900 | 6.1 | May 7 | Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified… Affected: through 8.1 |
| CVE-2017-8006 | 5.9 | Jul 17 | In EMC RSA Authentication Manager 8.2 SP1 Patch 1 and earlier, a malicious user logged into the Self-Service Console of RSA Authentication Manager as a target user can use a brute… Affected: through 8.2 |
| CVE-2017-14379 | 5.4 | Nov 28 | EMC RSA Authentication Manager before 8.2 SP1 P6 has a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system Affected: before 8.2 |
| CVE-2016-0902 | 5.3 | May 7 | CRLF injection vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting… Affected: through 8.1 |
| CVE-2020-5346 | 4.8 | Apr 15 | RSA Authentication Manager versions prior to 8.4 P11 contain a stored cross-site scripting vulnerability in the Security Console Affected: through 8.3; 8.4; 8.4; 8.4; 8.4; 8.4; +6 more |
| CVE-2020-5340 | 4.8 | Mar 26 | RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console Affected: before 8.4; 8.4; 8.4; 8.4; 8.4; 8.4; +5 more |
| CVE-2020-5339 | 4.8 | Mar 26 | RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console Affected: before 8.4; 8.4; 8.4; 8.4; 8.4; 8.4; +5 more |
| CVE-2019-18574 | 4.8 | Dec 3 | RSA Authentication Manager software versions prior to 8.4 P8 contain a stored cross-site scripting vulnerability in the Security Console Affected: 8.4; 8.4; 8.4; 8.4; 8.4; 8.4; +2 more |
| CVE-2018-11073 | 4.8 | Sep 28 | RSA Authentication Manager versions prior to 8.3 P3 contain a stored cross-site scripting vulnerability in the Operations Console Affected: 8.3; 8.3 |
| CVE-2017-8000 | 4.8 | Jul 17 | In EMC RSA Authentication Manager 8.2 SP1 and earlier, a malicious RSA Security Console Administrator could craft a token profile and store the profile name in the RSA… Affected: through 8.2 |
| CVE-2018-11075 | 4.7 | Sep 28 | RSA Authentication Manager versions prior to 8.3 P3 contain a reflected cross-site scripting vulnerability in a Security Console page Affected: 8.3; 8.3 |
| CVE-2017-15546 | 4.3 | Jan 25 | The Security Console in EMC RSA Authentication Manager 8.2 SP1 P6 and earlier is affected by a blind SQL injection vulnerability Affected: through 8.2; 8.2; 8.2; 8.2; 8.2; 8.2; +2 more |
Showing 18