EMC RSA Authentication Manager 8.3 Patch 1
Approved changes feed: RSS · Atom
cpe:2.3:a:emc:rsa_authentication_manager:8.3:p1:*:*:*:*:*:*
part: a version: 8.3 update: p1
| Vendor | Emc (f882007a-26e9-5b42-9f2e-94a4747c4377) |
|---|---|
| Product | Rsa Authentication Manager (de1a2981-d592-510c-ba30-7ac359c8cfd1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-1253 |
vulnerable | 2026-06-08 05:11:17.277697 |
Stored cross-site scripting vulnerability
MEDIUM (6.5)
RSA Authentication Manager Operation Console, versions 8.3 P1 and earlier, contains a stored cross-site scripting vulnerability. A malicious Operations Console administrator could potentially exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface. When other Operations Console administrators open the affected page, the injected scripts could potentially be executed in their browser.
Published: 2018-06-21T15:00:00.000Z
Updated: 2024-09-17T03:52:50.534Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11075 |
vulnerable | 2026-06-08 05:10:37.840646 |
DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities
MEDIUM (5.8)
RSA Authentication Manager versions prior to 8.3 P3 contain a reflected cross-site scripting vulnerability in a Security Console page. A remote, unauthenticated malicious user, with the knowledge of a target user's anti-CSRF token, could potentially exploit this vulnerability by tricking a victim Security Console user to supply malicious HTML or JavaScript code to the vulnerable web application, which code is then executed by the victim's web browser in the context of the vulnerable web application.
Published: 2018-09-28T18:00:00.000Z
Updated: 2024-09-17T00:30:53.695Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11074 |
vulnerable | 2026-06-08 05:10:37.840200 |
DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities
MEDIUM (6.1)
RSA Authentication Manager versions prior to 8.3 P3 are affected by a DOM-based cross-site scripting vulnerability which exists in its embedded MadCap Flare Help files. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to the browser DOM, which code is then executed by the web browser in the context of the vulnerable web application.
Published: 2018-09-28T18:00:00.000Z
Updated: 2024-09-16T23:36:47.316Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11073 |
vulnerable | 2026-06-08 05:10:37.839038 |
DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities
MEDIUM (6.5)
RSA Authentication Manager versions prior to 8.3 P3 contain a stored cross-site scripting vulnerability in the Operations Console. A malicious Operations Console administrator could exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface. When other Operations Console administrators open the affected page, the injected scripts could potentially be executed in their browser.
Published: 2018-09-28T18:00:00.000Z
Updated: 2024-09-17T01:20:47.843Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.