CVE-2012-2280

EMC RSA Authentication Manager <7.1-SP4 P14 - XSS

Title source: llm
STIX 2.1

Description

EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 do not properly use frames, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "Cross frame scripting vulnerability."

References (1)

Core 1
Core References
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2012-07/0064.html

Scores

EPSS 0.0021
EPSS Percentile 43.1%

Details

Status published
Products (8)
emc/rsa_authentication_manager 7.0
emc/rsa_authentication_manager 7.1 (2 CPE variants)
emc/rsa_authentication_manager < 7.1
rsa/authentication_manager 7.1 sp42
rsa/securid_appliance 2.0
rsa/securid_appliance 2.0.1
rsa/securid_appliance 2.0.2
rsa/securid_appliance 3.0 (4 CPE variants)
Published Jul 13, 2012
Tracked Since Feb 18, 2026