Read the docs

RSA

Records126All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical11CVSS 9.0–10.0
CVSS high32CVSS 7.0–8.9

Exploited now

RSA records in CISA KEV

No RSA vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

8 records in Authentication Agent For Web · all components

Priority MEDIUM 48

EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prior to Build 618 have a security vulnerability that could potentially lead to au…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03033 Published 2017-11-29 No fix listed CWE-287
Priority LOW 38

RSA Authentication Agent version 8.0.1 and earlier for Web for both IIS and Apache Web Server are impacted by a stack-based buffer overflow which may occur when handling certain malicious web cookies that have invalid fo…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02669 Published 2018-03-30 No fix listed CWE-787
Priority LOW 25

RSA Authentication Agent version 8.0.1 and earlier for Web for IIS is affected by a problem where access control list (ACL) permissions on a Windows Named Pipe were not sufficient to prevent access by unauthorized users.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00436 Published 2018-03-30 No fix listed CWE-200
Open these records in search →