Approved changes feed: RSS · Atom

cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:*:*:*:*:*:*:*

part: a version: 6.0.2.1 update: *

VendorEmc (f882007a-26e9-5b42-9f2e-94a4747c4377)
ProductRsa Adaptive Authentication On Premise (b13702c4-4e03-59ef-af05-0898cd31b24d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-4631 vulnerable 2026-06-08 05:05:45.306240 Details available
RSA Adaptive Authentication (On-Premise) 6.0.2.1 through 7.1 P3, when using device binding in a Challenge SOAP call or using the RSA Adaptive Authentication Integration Adapters with Out-of-Band Phone (Authentify) functionality, conducts permanent device binding even when authentication fails, which allows remote attackers to bypass authentication.
Published: 2014-12-08T11:00:00.000Z
Updated: 2024-08-06T11:20:26.670Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0638 vulnerable 2026-06-08 05:05:13.848607 Details available
Cross-site scripting (XSS) vulnerability in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a "cross-frame scripting" issue.
Published: 2014-04-04T15:00:00.000Z
Updated: 2024-08-06T09:20:19.847Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0637 vulnerable 2026-06-08 05:05:13.842441 Details available
Cross-site scripting (XSS) vulnerability in the back-office case-management application in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-04-04T15:00:00.000Z
Updated: 2024-08-06T09:20:19.964Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4611 vulnerable 2026-06-08 05:02:51.768907 Details available
Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Adaptive Authentication On-Premise (AAOP) before 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2012-11-27T21:00:00.000Z
Updated: 2024-08-06T20:42:54.681Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2286 vulnerable 2026-06-08 05:02:03.170560 Details available
Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 before SP3 P3 allows remote attackers to obtain sensitive information via unknown vectors.
Published: 2012-10-10T21:00:00.000Z
Updated: 2024-08-06T19:26:09.329Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1422 vulnerable 2026-06-08 04:57:59.134863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.