4.8
Moyenne
CVE-2019-18574 RSA Authentication Manager software versions prior to 8.4 P8 contain a stored cross-site scripting vulnerability in…
Description
RSA Authentication Manager software versions prior to 8.4 P8 contain a stored cross-site scripting vulnerability in the Security Console. A malicious Security Console administrator could exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface which could then be included in a report. When other Security Console administrators open the affected report, the injected scripts could potentially be executed in their browser.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| RSA Authentication Manager | Versions non publiées |
Autres CVE de RSA Authentication Manager
Les 7 CVE de RSA Authentication Manager →
CVE-2020-5346
RSA Authentication Manager versions prior to 8.4 P11 contain a stored cross-site scripting vulnerability in the Security…
4.8
Moyenne
CVE-2020-5340
RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security…
4.8
Moyenne
CVE-2020-5339
RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security…
4.8
Moyenne
CVE-2019-3768
RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability
6.5
Moyenne