GCVE - cpe:2.3:a:rsa:envision:4.0:sp3:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:rsa:envision:4.0:sp3:*:*:*:*:*:*

part: a version: 4.0 update: sp3

Vendor	Rsa (`6c9430aa-ac8c-5ac3-900a-ccfffd5a25d5`)
Product	Envision (`9da25730-7434-55d8-92e7-9178c8795075`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-0403`	vulnerable	2026-06-03 14:31:36.758783	Details available Directory traversal vulnerability in EMC RSA enVision 4.x before 4.1 Patch 4 allows remote authenticated users to have an unspecified impact via unknown vectors. Published: 2012-03-20T15:00:00.000Z Updated: 2024-08-06T18:23:31.007Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/52557 http://osvdb.org/80210 http://secunia.com/advisories/48484 http://www.securitytracker.com/id?1026819 http://archives.neohapsis.com/archives/bugtraq/2012-03/0081.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0402`	vulnerable	2026-06-03 14:31:36.758399	Details available EMC RSA enVision 4.x before 4.1 Patch 4 uses unspecified hardcoded credentials, which makes it easier for remote attackers to obtain access via unknown vectors. Published: 2012-03-20T15:00:00.000Z Updated: 2024-08-06T18:23:31.000Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/52557 http://secunia.com/advisories/48484 http://www.securitytracker.com/id?1026819 https://exchange.xforce.ibmcloud.com/vulnerabilities/74138 http://archives.neohapsis.com/archives/bugtraq/2012-03/0081.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0401`	vulnerable	2026-06-03 14:31:36.758034	Details available Multiple SQL injection vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Published: 2012-03-20T15:00:00.000Z Updated: 2024-08-06T18:23:31.009Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/52557 http://secunia.com/advisories/48484 https://exchange.xforce.ibmcloud.com/vulnerabilities/74137 http://www.securitytracker.com/id?1026819 http://archives.neohapsis.com/archives/bugtraq/2012-03/0081.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0400`	vulnerable	2026-06-03 14:31:36.757636	Details available EMC RSA enVision 4.x before 4.1 Patch 4 does not properly restrict the number of failed authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack. Published: 2012-03-20T15:00:00.000Z Updated: 2024-08-06T18:23:31.010Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/52557 http://secunia.com/advisories/48484 http://www.securitytracker.com/id?1026819 http://osvdb.org/80207 https://exchange.xforce.ibmcloud.com/vulnerabilities/74140	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0399`	vulnerable	2026-06-03 14:31:36.756175	Details available Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2012-03-20T15:00:00.000Z Updated: 2024-08-06T18:23:30.989Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/52557 http://secunia.com/advisories/48484 http://www.securitytracker.com/id?1026819 http://osvdb.org/80206 http://archives.neohapsis.com/archives/bugtraq/2012-03/0081.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4143`	vulnerable	2026-06-03 14:31:23.351016	Details available EMC RSA enVision 4.0 before SP4 P5 and 4.1 before P3 allows remote attackers to obtain sensitive information about environment variables in the web system via unspecified vectors. Published: 2012-01-27T00:00:00.000Z Updated: 2024-09-16T22:25:06.930Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/521375	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2737`	vulnerable	2026-06-03 14:31:10.591070	Details available RSA enVision 3.x and 4.x before 4 SP4 P3 allows remote attackers to read arbitrary files via unspecified vectors, related to an "arbitrary file retrieval vulnerability." Published: 2011-08-25T14:00:00.000Z Updated: 2024-08-06T23:08:23.765Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/519395/100/0/threaded http://securityreason.com/securityalert/8350 http://www.securitytracker.com/id?1025979	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2736`	vulnerable	2026-06-03 14:31:10.585946	Details available RSA enVision 4.x before 4 SP4 P3 places cleartext administrative credentials in Task Escalation e-mail messages, which allows remote attackers to obtain sensitive information by sniffing the network or leveraging access to a recipient mailbox. Published: 2011-08-25T14:00:00.000Z Updated: 2024-08-06T23:08:23.761Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/519395/100/0/threaded http://securityreason.com/securityalert/8350 http://www.securitytracker.com/id?1025979	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.