CVE-2017-14379

MEDIUM

RSA Authentication Manager < 8.2 SP1 P6 - Cross-Site Scripting

Title source: llm

Description

EMC RSA Authentication Manager before 8.2 SP1 P6 has a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1039853

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/101925

Mailing List, Third Party Advisory x_refsource_confirm

http://seclists.org/fulldisclosure/2017/Nov/34

Scores

CVSS v3 5.4

EPSS 0.0021

EPSS Percentile 43.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-79

Status published

Products (2)

emc/rsa_authentication_manager < 8.2

n/a/RSA Authentication Manager software version 8.2 SP1 P5 and earlier RSA Authentication Manager software version 8.2 SP1 P5 and earlier

Published Nov 28, 2017

Tracked Since Feb 18, 2026