Authentication Agent For Web vulnerabilities | LiveThreat CVE Feed

Product

Authentication Agent For Web

by Rsa · last CVE Mar 30, 2018

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities8 In the news0 Timeline

Severity mix

Critical 1High 1Medium 2Low 0

Severity

All severities8 Critical1 High1 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Authentication Agent For Web to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-14377	9.8	3%	Nov 29	EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prior to Build 618 have a security… Affected: 8.0; 8.0.1
CVE-2018-1232	7.5	3%	Mar 30	RSA Authentication Agent version 8.0.1 and earlier for Web for both IIS and Apache Web Server are impacted by a stack-based buffer overflow which may occur when handling certain… Affected: through 8.0.1; through 8.0.1
CVE-2018-1233	6.1	1%	Mar 30	RSA Authentication Agent version 8.0.1 and earlier for Web for both IIS and Apache Web Server are affected by a cross-site scripting vulnerability Affected: through 8.0.1; through 8.0.1
CVE-2018-1234	5.5	0%	Mar 30	RSA Authentication Agent version 8.0.1 and earlier for Web for IIS is affected by a problem where access control list (ACL) permissions on a Windows Named Pipe were not sufficient… Affected: through 8.0.1; through 8.0.1
CVE-2010-3261	–	2%	Sep 24	Directory traversal vulnerability in RSA Authentication Agent 7.0 before P2 for Web allows remote attackers to read unspecified data via unknown vectors Affected: through 7.0; 5.1; 5.1.1; 5.2; 5.3
CVE-2005-4734	–	55%	Dec 31	Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows remote attackers to execute arbitrary code… Affected: 5.2; 5.3
CVE-2005-3329	–	2%	Oct 27	Cross-site scripting (XSS) vulnerability in RSA Authentication Agent for Web 5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the image parameter… Affected: through 5.3; 5.1; 5.1.1; 5.2
CVE-2005-1118	–	3%	Apr 14	Cross-site scripting (XSS) vulnerability in IISWebAgentIF.dll in the RSA Authentication Agent for Web 5.2 allows remote attackers to inject arbitrary web script or HTML via the… Affected: 5.2