6.5
Medium
CVE-2019-3768 RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability
Description
RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability. A remote authenticated malicious user could potentially exploit this vulnerability to cause information disclosure of local system files by supplying specially crafted XML message.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RSA Authentication Manager | Versions not published |
Other CVEs of RSA Authentication Manager
The 7 CVEs of RSA Authentication Manager →
CVE-2020-5346
RSA Authentication Manager versions prior to 8.4 P11 contain a stored cross-site scripting vulnerability in the Security…
4.8
Medium
CVE-2020-5340
RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security…
4.8
Medium
CVE-2020-5339
RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security…
4.8
Medium
CVE-2019-18574
RSA Authentication Manager software versions prior to 8.4 P8 contain a stored cross-site scripting vulnerability in…
4.8
Medium