CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
Confidence
High
EPSS
Percentile
50.8%
Cross-site scripting (XSS) vulnerability in the back-office case-management application in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Vendor | Product | Version | CPE |
---|---|---|---|
emc | rsa_adaptive_authentication_on-premise | 6.0 | cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0:*:*:*:*:*:*:* |
emc | rsa_adaptive_authentication_on-premise | 6.0.2.1 | cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:*:*:*:*:*:*:* |
emc | rsa_adaptive_authentication_on-premise | 6.0.2.1 | cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp1_patch2:*:*:*:*:*:* |
emc | rsa_adaptive_authentication_on-premise | 6.0.2.1 | cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp1_patch3:*:*:*:*:*:* |
emc | rsa_adaptive_authentication_on-premise | 6.0.2.1 | cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp2:*:*:*:*:*:* |
emc | rsa_adaptive_authentication_on-premise | 6.0.2.1 | cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp2_patch1:*:*:*:*:*:* |
emc | rsa_adaptive_authentication_on-premise | 6.0.2.1 | cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp3:*:*:*:*:*:* |
emc | rsa_adaptive_authentication_on-premise | 6.0.2.1 | cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp3_p3:*:*:*:*:*:* |
emc | rsa_adaptive_authentication_on-premise | 7.0 | cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:7.0:*:*:*:*:*:*:* |
emc | rsa_adaptive_authentication_on-premise | 7.1 | cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:7.1:*:*:*:*:*:*:* |