Rsa Certificate Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:emc:rsa_certificate_manager:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Emc (f882007a-26e9-5b42-9f2e-94a4747c4377) |
|---|---|
| Product | Rsa Certificate Manager (79b93c28-ed30-56e7-8f29-f07d26310fbf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-11051 |
vulnerable | 2026-06-08 05:10:37.738824 |
RSA Certificate Manager Path Traversal Vulnerability
HIGH (7.5)
RSA Certificate Manager Versions 6.9 build 560 through 6.9 build 564 contain a path traversal vulnerability in the RSA CMP Enroll Server and the RSA REST Enroll Server. A remote unauthenticated attacker could potentially exploit this vulnerability by manipulating input parameters of the application to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web application.
Published: 2018-07-03T17:00:00.000Z
Updated: 2024-09-16T21:08:18.669Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4546 |
vulnerable | 2026-06-08 05:06:40.159500 |
Details available
Directory traversal vulnerability in EMC RSA OneStep 6.9 before build 559, as used in RSA Certificate Manager and RSA Registration Manager through 6.9 build 558 and other products, allows remote attackers to read arbitrary files via a crafted KCSOSC_ERROR_PAGE parameter.
Published: 2015-10-02T01:00:00.000Z
Updated: 2024-08-06T06:18:12.000Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0523 |
vulnerable | 2026-06-08 05:06:21.673670 |
Details available
EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allow remote attackers to cause an Administration Server denial of service via an invalid MIME e-mail message with a multipart/* Content-Type header.
Published: 2015-03-12T10:00:00.000Z
Updated: 2024-08-06T04:10:11.046Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0522 |
vulnerable | 2026-06-08 05:06:21.673321 |
Details available
Cross-site scripting (XSS) vulnerability in EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allows remote attackers to inject arbitrary web script or HTML via vectors related to the email address parameter.
Published: 2015-03-12T10:00:00.000Z
Updated: 2024-08-06T04:10:11.143Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0521 |
vulnerable | 2026-06-08 05:06:21.671710 |
Details available
Cross-site scripting (XSS) vulnerability in EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the CMP shared secret parameter.
Published: 2015-03-12T10:00:00.000Z
Updated: 2024-08-06T04:10:10.963Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.