Approved changes feed: RSS · Atom

cpe:2.3:a:dell_emc:rsa_netwitness:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell Emc (aa27910a-076f-50ea-a256-1da4f35e48f9)
ProductRsa Netwitness (772870ea-b491-5fad-b209-7d44486cae81)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-11061 vulnerable 2026-06-08 05:10:37.793002 Details available
CRITICAL (9.1)
RSA NetWitness Platform versions prior to 11.1.0.2 and RSA Security Analytics versions prior to 10.6.6 are vulnerable to a server-side template injection vulnerability due to insecure configuration of the template engine used in the product. A remote authenticated malicious RSA NetWitness Server user with an Admin or Operator role could exploit this vulnerability to execute arbitrary commands on the server with root privileges.
Published: 2018-08-24T15:00:00.000Z
Updated: 2024-09-17T01:06:59.417Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.