6.1
CVSSv3

CVE-2018-1254

Published: 21/06/2018 Updated: 27/03/2020
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

RSA Authentication Manager Security Console, versions 8.3 P1 and previous versions, contains a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim Security Console administrator to supply malicious HTML or JavaScript code to a vulnerable web application, which is then reflected back to the victim and executed by the web browser.

Vulnerable Product Search on Vulmon Subscribe to Product

emc rsa authentication manager

Mailing Lists

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 DSA-2018-107: RSA Authentication Manager Cross-site scripting Vulnerabilities Dell EMC Identifier: DSA-2018-107 CVE Identifier: CVE-2018-1253, CVE-2018-1254 Severity: Medium Severity Rating: CVSS v3 Base Score: See below for individual CVSS V3 Scores Affected Products: RSA Authentication Manager v ...