Emc Rsa Authentication Manager
25 CVEs affecting Emc Rsa Authentication Manager. Latest disclosed: 2020-04-15. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-3768 | Medium | 6.5 | 2020-01-03 | RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability. A remote authenticated malicious user could potentially expl… |
CVE-2018-11073 | Medium | 6.5 | 2018-09-28 | RSA Authentication Manager versions prior to 8.3 P3 contain a stored cross-site scripting vulnerability in the Operations Console. A malicious Operations Conso… |
CVE-2018-11074 | Medium | 6.1 | 2018-09-28 | RSA Authentication Manager versions prior to 8.3 P3 are affected by a DOM-based cross-site scripting vulnerability which exists in its embedded MadCap Flare He… |
CVE-2018-1254 | Medium | 6.1 | 2018-06-21 | RSA Authentication Manager Security Console, versions 8.3 P1 and earlier, contains a reflected cross-site scripting vulnerability. A remote unauthenticated att… |
CVE-2018-1253 | Medium | 6.1 | 2018-06-21 | RSA Authentication Manager Operation Console, versions 8.3 P1 and earlier, contains a stored cross-site scripting vulnerability. A malicious Operations Console… |
CVE-2017-14373 | Medium | 6.1 | 2017-10-31 | EMC RSA Authentication Manager 8.2 SP1 P4 and earlier contains a reflected cross-site scripting vulnerability that could potentially be exploited by malicious… |
CVE-2016-0901 | Medium | 6.1 | 2016-05-07 | Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML vi… |
CVE-2016-0900 | Medium | 6.1 | 2016-05-07 | Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML vi… |
CVE-2017-8006 | Medium | 5.9 | 2017-07-17 | In EMC RSA Authentication Manager 8.2 SP1 Patch 1 and earlier, a malicious user logged into the Self-Service Console of RSA Authentication Manager as a target… |
CVE-2019-3711 | Medium | 5.8 | 2019-03-13 | RSA Authentication Manager versions prior to 8.4 P1 contain an Insecure Credential Management Vulnerability. A malicious Operations Console administrator may b… |
CVE-2018-11075 | Medium | 5.8 | 2018-09-28 | RSA Authentication Manager versions prior to 8.3 P3 contain a reflected cross-site scripting vulnerability in a Security Console page. A remote, unauthenticate… |
CVE-2017-14379 | Medium | 5.4 | 2017-11-28 | EMC RSA Authentication Manager before 8.2 SP1 P6 has a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise… |
CVE-2016-0902 | Medium | 5.3 | 2016-05-07 | CRLF injection vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP res… |
CVE-2020-5346 | Medium | 4.8 | 2020-04-15 | RSA Authentication Manager versions prior to 8.4 P11 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authenticatio… |
CVE-2020-5340 | Medium | 4.8 | 2020-03-26 | RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authenticatio… |
CVE-2020-5339 | Medium | 4.8 | 2020-03-26 | RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authenticatio… |
CVE-2019-18574 | Medium | 4.8 | 2019-12-03 | RSA Authentication Manager software versions prior to 8.4 P8 contain a stored cross-site scripting vulnerability in the Security Console. A malicious Security… |
CVE-2017-8000 | Medium | 4.8 | 2017-07-17 | In EMC RSA Authentication Manager 8.2 SP1 and earlier, a malicious RSA Security Console Administrator could craft a token profile and store the profile name in… |
CVE-2017-15546 | Medium | 4.3 | 2018-01-25 | The Security Console in EMC RSA Authentication Manager 8.2 SP1 P6 and earlier is affected by a blind SQL injection vulnerability. Authenticated malicious users… |
CVE-2014-2516 | | 2014-12-12 | Open redirect vulnerability in EMC RSA Authentication Manager 8.x before 8.1 Patch 6 allows remote attackers to redirect users to arbitrary web sites and condu… |