CVE-2015-0522
EMC RSA Certificate Manager and Registration Manager < 6.8 - Cross-Site Scripting via Email Address Parameter
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allows remote attackers to inject arbitrary web script or HTML via vectors related to the email address parameter.
References (3)
Core 3
Core References
Mailing List mailing-list
x_refsource_bugtraq
http://seclists.org/bugtraq/2015/Mar/47
Exploit, Third Party Advisory x_refsource_misc
http://packetstormsecurity.com/files/130769/RSA-Digital-Certificate-Solution-XSS-Denial-Of-Service.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1031912
Scores
EPSS
0.0014
EPSS Percentile
33.1%
Details
CWE
CWE-79
Status
published
Products (2)
emc/rsa_certificate_manager
< 6.8
emc/rsa_registration_manager
< 6.8
Published
Mar 12, 2015
Tracked Since
Feb 18, 2026