GCVE - cpe:2.3:a:emc:rsa_authentication_manager:8.4:-:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:emc:rsa_authentication_manager:8.4:-:*:*:*:*:*:*

part: a version: 8.4 update: -

Vendor	Emc (`f882007a-26e9-5b42-9f2e-94a4747c4377`)
Product	Rsa Authentication Manager (`de1a2981-d592-510c-ba30-7ac359c8cfd1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-5346`	vulnerable	2026-06-08 05:26:42.210662	Details available MEDIUM (4.8) RSA Authentication Manager versions prior to 8.4 P11 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript code through the Security Console web interface. When other Security Console administrators open the affected page, the injected scripts could potentially be executed in their browser. Published: 2020-04-15T18:00:18.313Z Updated: 2024-09-16T19:56:48.979Z Open on db.gcve.eu Reference links https://community.rsa.com/docs/DOC-111347	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-5340`	vulnerable	2026-06-08 05:26:42.176469	Details available MEDIUM (4.8) RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript code through the Security Console web interface. When other Security Console administrators attempt to change the default security domain mapping, the injected scripts could potentially be executed in their browser. Published: 2020-03-25T21:05:15.109Z Updated: 2024-09-17T03:43:40.798Z Open on db.gcve.eu Reference links https://community.rsa.com/docs/DOC-111092	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-5339`	vulnerable	2026-06-08 05:26:42.168532	Details available MEDIUM (4.8) RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript code through the Security Console web interface. When other Security Console administrators open the affected report page, the injected scripts could potentially be executed in their browser. Published: 2020-03-25T21:05:14.708Z Updated: 2024-09-17T00:06:00.697Z Open on db.gcve.eu Reference links https://community.rsa.com/docs/DOC-111092	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-3768`	vulnerable	2026-06-08 05:13:55.954801	Details available MEDIUM (6.5) RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability. A remote authenticated malicious user could potentially exploit this vulnerability to cause information disclosure of local system files by supplying specially crafted XML message. Published: 2020-01-03T22:35:12.019Z Updated: 2024-09-17T04:19:05.205Z Open on db.gcve.eu Reference links https://www.dell.com/support/security/en-us/details/DOC-108320/DSA-2019-148-RSA&#174%3B-Authentication-Manager-Software-XML-Entity-Injection-Vulnerability	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-3711`	vulnerable	2026-06-08 05:13:55.408891	DSA-2019-038: RSA® Authentication Manager Insecure Credential Management Vulnerability MEDIUM (5.8) RSA Authentication Manager versions prior to 8.4 P1 contain an Insecure Credential Management Vulnerability. A malicious Operations Console administrator may be able to obtain the value of a domain password that another Operations Console administrator had set previously and use it for attacks. Published: 2019-03-13T22:00:00.000Z Updated: 2024-09-16T20:17:34.908Z Open on db.gcve.eu Reference links https://seclists.org/fulldisclosure/2019/Mar/5 http://www.securityfocus.com/bid/107210	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-18574`	vulnerable	2026-06-08 05:13:11.640179	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.