Dell RSA Identity Governance and Lifecycle 7.0.2 Patch 6
Approved changes feed: RSS · Atom
cpe:2.3:a:dell:rsa_identity_governance_and_lifecycle:7.0.2:p6:*:*:*:*:*:*
part: a version: 7.0.2 update: p6
| Vendor | Dell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3) |
|---|---|
| Product | Rsa Identity Governance And Lifecycle (62e680f7-86e4-5737-ad5d-1df72d800d11) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-3763 |
vulnerable | 2026-06-08 05:13:55.941742 |
Details available
HIGH (8.8)
The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain an information exposure vulnerability. The Office 365 user password may get logged in a plain text format in the Office 365 connector debug log file. An authenticated malicious local user with access to the debug logs may obtain the exposed password to use in further attacks.
Published: 2019-09-11T19:17:30.440Z
Updated: 2024-09-16T22:20:25.143Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3761 |
vulnerable | 2026-06-08 05:13:55.927136 |
Details available
MEDIUM (5.4)
The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a stored cross-site scripting vulnerability in the Access Request module. A remote authenticated malicious user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the stored malicious code would gets executed by the web browser in the context of the vulnerable web application.
Published: 2019-09-11T19:17:30.396Z
Updated: 2024-09-16T18:12:57.898Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3760 |
vulnerable | 2026-06-08 05:13:55.925509 |
Details available
MEDIUM (6.4)
The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a SQL Injection vulnerability in Workflow Architect. A remote authenticated malicious user could potentially exploit this vulnerability to execute SQL commands on the back-end database to gain unauthorized access to the data by supplying specially crafted input data to the affected application.
Published: 2019-09-11T19:17:30.353Z
Updated: 2024-09-17T04:18:59.375Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3759 |
vulnerable | 2026-06-08 05:13:55.913508 |
Details available
MEDIUM (6.4)
The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a code injection vulnerability. A remote authenticated malicious user could potentially exploit this vulnerability to run custom Groovy scripts to gain limited access to view or modify information on the Workflow system.
Published: 2019-09-11T19:17:30.305Z
Updated: 2024-09-17T01:06:30.738Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.