GCVE - cpe:2.3:a:rsa:authentication_manager:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:rsa:authentication_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Rsa (`6c9430aa-ac8c-5ac3-900a-ccfffd5a25d5`)
Product	Authentication Manager (`ed1a1496-80d8-5449-8994-6c6c9c3daee5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-25066`	vulnerable	2026-06-08 06:31:21.887026	Details available MEDIUM (4.3) RSA Authentication Manager before 8.7 SP2 Patch 1 allows XML External Entity (XXE) attacks via a license file, resulting in attacker-controlled files being stored on the product's server. Data exfiltration cannot occur. Published: 2025-02-17T00:00:00.000Z Updated: 2025-02-18T16:05:07.133Z Open on db.gcve.eu Reference links https://www.rsa.com/en-us/company/vulnerability-response-policy https://community.rsa.com/s/advisories https://github.com/KaiwenTM/CVE_POC/blob/main/CVE-2024-25066.txt https://community.rsa.com/s/article/RSA-Authentication-Manager-8-7-SP2-Patch-1-Readme	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-3711`	vulnerable	2026-06-08 05:13:55.409753	DSA-2019-038: RSA® Authentication Manager Insecure Credential Management Vulnerability MEDIUM (5.8) RSA Authentication Manager versions prior to 8.4 P1 contain an Insecure Credential Management Vulnerability. A malicious Operations Console administrator may be able to obtain the value of a domain password that another Operations Console administrator had set previously and use it for attacks. Published: 2019-03-13T22:00:00.000Z Updated: 2024-09-16T20:17:34.908Z Open on db.gcve.eu Reference links https://seclists.org/fulldisclosure/2019/Mar/5 http://www.securityfocus.com/bid/107210	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-18574`	vulnerable	2026-06-08 05:13:11.645777	Details available MEDIUM (4.8) RSA Authentication Manager software versions prior to 8.4 P8 contain a stored cross-site scripting vulnerability in the Security Console. A malicious Security Console administrator could exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface which could then be included in a report. When other Security Console administrators open the affected report, the injected scripts could potentially be executed in their browser. Published: 2019-12-03T20:20:15.995Z Updated: 2024-09-16T18:03:34.741Z Open on db.gcve.eu Reference links https://www.dell.com/support/security/en-us/details/DOC-109297/DSA-2019-168-RSA&#174%3B-Authentication-Manager-Software-Stored-Cross-Site-Scripting-Vulnerability	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-1253`	vulnerable	2026-06-08 05:11:17.269833	Stored cross-site scripting vulnerability MEDIUM (6.5) RSA Authentication Manager Operation Console, versions 8.3 P1 and earlier, contains a stored cross-site scripting vulnerability. A malicious Operations Console administrator could potentially exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface. When other Operations Console administrators open the affected page, the injected scripts could potentially be executed in their browser. Published: 2018-06-21T15:00:00.000Z Updated: 2024-09-17T03:52:50.534Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/104534 http://www.securitytracker.com/id/1041134 http://seclists.org/fulldisclosure/2018/Jun/39	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-1248`	vulnerable	2026-06-08 05:11:17.257814	Details available RSA Authentication Manager Security Console, Operation Console and Self-Service Console, version 8.3 and earlier, is affected by a Host header injection vulnerability. This could allow a remote attacker to potentially poison HTTP cache and subsequently redirect users to arbitrary web domains. Published: 2018-05-08T13:00:00.000Z Updated: 2024-09-16T16:13:25.346Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/104113 http://seclists.org/fulldisclosure/2018/May/18 http://www.securitytracker.com/id/1040835	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-1247`	vulnerable	2026-06-08 05:11:17.256694	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-15782`	vulnerable	2026-06-08 05:11:03.602964	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-11075`	vulnerable	2026-06-08 05:10:37.840613	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-11074`	vulnerable	2026-06-08 05:10:37.840053	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-11073`	vulnerable	2026-06-08 05:10:37.838082	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.