Rsa Authentication Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:dell:rsa_authentication_manager:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Dell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3) |
|---|---|
| Product | Rsa Authentication Manager (00bc7b99-12d8-5c46-9f80-85d2d55fb458) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-5346 |
vulnerable | 2026-06-08 05:26:42.210475 |
Details available
MEDIUM (4.8)
RSA Authentication Manager versions prior to 8.4 P11 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript code through the Security Console web interface. When other Security Console administrators open the affected page, the injected scripts could potentially be executed in their browser.
Published: 2020-04-15T18:00:18.313Z
Updated: 2024-09-16T19:56:48.979Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5340 |
vulnerable | 2026-06-08 05:26:42.176314 |
Details available
MEDIUM (4.8)
RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript code through the Security Console web interface. When other Security Console administrators attempt to change the default security domain mapping, the injected scripts could potentially be executed in their browser.
Published: 2020-03-25T21:05:15.109Z
Updated: 2024-09-17T03:43:40.798Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5339 |
vulnerable | 2026-06-08 05:26:42.166834 |
Details available
MEDIUM (4.8)
RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript code through the Security Console web interface. When other Security Console administrators open the affected report page, the injected scripts could potentially be executed in their browser.
Published: 2020-03-25T21:05:14.708Z
Updated: 2024-09-17T00:06:00.697Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3768 |
vulnerable | 2026-06-08 05:13:55.953580 |
Details available
MEDIUM (6.5)
RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability. A remote authenticated malicious user could potentially exploit this vulnerability to cause information disclosure of local system files by supplying specially crafted XML message.
Published: 2020-01-03T22:35:12.019Z
Updated: 2024-09-17T04:19:05.205Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3711 |
vulnerable | 2026-06-08 05:13:55.408185 |
DSA-2019-038: RSA® Authentication Manager Insecure Credential Management Vulnerability
MEDIUM (5.8)
RSA Authentication Manager versions prior to 8.4 P1 contain an Insecure Credential Management Vulnerability. A malicious Operations Console administrator may be able to obtain the value of a domain password that another Operations Console administrator had set previously and use it for attacks.
Published: 2019-03-13T22:00:00.000Z
Updated: 2024-09-16T20:17:34.908Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18574 |
vulnerable | 2026-06-08 05:13:11.639113 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15782 |
vulnerable | 2026-06-08 05:11:03.602320 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.