Rsa Adaptive Authentication On Premise
Approved changes feed: RSS · Atom
cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp3:*:*:*:*:*:*
part: a version: 6.0.2.1 update: sp3
| Vendor | Emc (f882007a-26e9-5b42-9f2e-94a4747c4377) |
|---|---|
| Product | Rsa Adaptive Authentication On Premise (b13702c4-4e03-59ef-af05-0898cd31b24d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-4631 |
vulnerable | 2026-06-08 05:05:45.309320 |
Details available
RSA Adaptive Authentication (On-Premise) 6.0.2.1 through 7.1 P3, when using device binding in a Challenge SOAP call or using the RSA Adaptive Authentication Integration Adapters with Out-of-Band Phone (Authentify) functionality, conducts permanent device binding even when authentication fails, which allows remote attackers to bypass authentication.
Published: 2014-12-08T11:00:00.000Z
Updated: 2024-08-06T11:20:26.670Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0638 |
vulnerable | 2026-06-08 05:05:13.848699 |
Details available
Cross-site scripting (XSS) vulnerability in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a "cross-frame scripting" issue.
Published: 2014-04-04T15:00:00.000Z
Updated: 2024-08-06T09:20:19.847Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0637 |
vulnerable | 2026-06-08 05:05:13.845908 |
Details available
Cross-site scripting (XSS) vulnerability in the back-office case-management application in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-04-04T15:00:00.000Z
Updated: 2024-08-06T09:20:19.964Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4611 |
vulnerable | 2026-06-08 05:02:51.771676 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Adaptive Authentication On-Premise (AAOP) before 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2012-11-27T21:00:00.000Z
Updated: 2024-08-06T20:42:54.681Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2742 |
vulnerable | 2026-06-08 04:58:08.986892 |
Details available
EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly perform forensic evaluation upon receipt of device tokens from mobile apps, which might allow remote attackers to bypass intended application restrictions via a mobile device.
Published: 2011-12-14T11:00:00.000Z
Updated: 2024-08-06T23:08:23.748Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2741 |
vulnerable | 2026-06-08 04:58:08.986526 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2733 |
vulnerable | 2026-06-08 04:58:08.952873 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.