Vulnerability in Emc Rsa Authentication Manager
CVE-2012-2280
EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 do not properly use frames, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "Cross frame scripting vulnerability."
EPSS: 0.011 (61.9th percentile) — read the EPSS interpretation.
Affected products
- Emc Rsa_authentication_manager — versions 7.0, 7.1
- Rsa Authentication_manager — versions 7.1
- Rsa Securid_appliance — versions 2.0, 2.0.1, 2.0.2
- N/a — versions n/a
References
- security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)