Approved changes feed: RSS · Atom

cpe:2.3:a:rsa:netwitness:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRsa (6c9430aa-ac8c-5ac3-900a-ccfffd5a25d5)
ProductNetwitness (14c965c4-4d95-58a3-ba58-120ec7f5b3d2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-47529 vulnerable 2026-06-03 14:48:27.650952 Details available
Insecure Win32 memory objects in Endpoint Windows Agents in RSA NetWitness Platform before 12.2 allow local and admin Windows user accounts to modify the endpoint agent service configuration: to either disable it completely or run user-supplied code or commands, thereby bypassing tamper-protection features via ACL modification.
Published: 2023-03-28T00:00:00.000Z
Updated: 2024-08-03T14:55:08.330Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3725 vulnerable 2026-06-03 14:40:27.252585 Command Injection vulnerability
CRITICAL (9.8)
RSA Netwitness Platform versions prior to 11.2.1.1 and RSA Security Analytics versions prior to 10.6.6.1 are vulnerable to a Command Injection vulnerability due to missing input validation in the product. A remote unauthenticated malicious user could exploit this vulnerability to execute arbitrary commands on the server.
Published: 2019-05-15T15:45:11.741Z
Updated: 2024-09-16T19:01:43.913Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.