Rsa Netwitness
Approved changes feed: RSS · Atom
cpe:2.3:a:emc:rsa_netwitness:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Emc (f882007a-26e9-5b42-9f2e-94a4747c4377) |
|---|---|
| Product | Rsa Netwitness (bf74a53c-a2e5-5fbe-993f-291fa01b265f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-11061 |
vulnerable | 2026-06-08 05:10:37.794437 |
Details available
CRITICAL (9.1)
RSA NetWitness Platform versions prior to 11.1.0.2 and RSA Security Analytics versions prior to 10.6.6 are vulnerable to a server-side template injection vulnerability due to insecure configuration of the template engine used in the product. A remote authenticated malicious RSA NetWitness Server user with an Admin or Operator role could exploit this vulnerability to execute arbitrary commands on the server with root privileges.
Published: 2018-08-24T15:00:00.000Z
Updated: 2024-09-17T01:06:59.417Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0643 |
vulnerable | 2026-06-08 05:05:13.864661 |
Details available
EMC RSA NetWitness before 9.8.5.19 and RSA Security Analytics before 10.2.4 and 10.3.x before 10.3.2, when Kerberos PAM is enabled, do not require a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid account name.
Published: 2014-05-16T10:00:00.000Z
Updated: 2024-08-06T09:20:19.781Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.