Approved changes feed: RSS · Atom

cpe:2.3:a:dell_emc:rsa_authentication_agent_for_web_for_iis,_rsa_authentication_agent_for_web_for_apache_web_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell Emc (aa27910a-076f-50ea-a256-1da4f35e48f9)
ProductRsa Authentication Agent For Web For Iis, Rsa Authentication Agent For Web For Apache Web Server (6eda69d0-7b27-5f15-9ad9-7a1f903852e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1233 vulnerable 2026-06-08 05:11:17.231414 Details available
RSA Authentication Agent version 8.0.1 and earlier for Web for both IIS and Apache Web Server are affected by a cross-site scripting vulnerability. The attackers could potentially exploit this vulnerability to execute arbitrary HTML or JavaScript code in the user's browser session in the context of the affected website.
Published: 2018-03-30T21:00:00.000Z
Updated: 2024-09-16T19:56:31.343Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1232 vulnerable 2026-06-08 05:11:17.229797 Details available
RSA Authentication Agent version 8.0.1 and earlier for Web for both IIS and Apache Web Server are impacted by a stack-based buffer overflow which may occur when handling certain malicious web cookies that have invalid formats. The attacker could exploit this vulnerability to crash the authentication agent and cause a denial-of-service situation.
Published: 2018-03-30T21:00:00.000Z
Updated: 2024-09-17T00:25:34.327Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.