CVE-2012-2278

RSA Authentication Manager < 7.1 SP4 P14 and RSA SecurID Appliance < 3.0 SP4 P14 - Cross-Site Scripting

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in the (1) Self-Service Console and (2) Security Console in EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (1)

Core 1
Core References
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2012-07/0064.html

Scores

EPSS 0.0020
EPSS Percentile 42.1%

Details

CWE
CWE-79
Status published
Products (8)
emc/rsa_authentication_manager 7.0
emc/rsa_authentication_manager 7.1 (2 CPE variants)
emc/rsa_authentication_manager < 7.1
rsa/authentication_manager 7.1 sp42
rsa/securid_appliance 2.0
rsa/securid_appliance 2.0.1
rsa/securid_appliance 2.0.2
rsa/securid_appliance 3.0 (4 CPE variants)
Published Jul 13, 2012
Tracked Since Feb 18, 2026