Priority LOW 27
Cross-site scripting (XSS) vulnerability in the Case Management application in EMC RSA Adaptive Authentication (On-Premise) before 6.0.2.1.SP3.P4 HF210, 7.0.x and 7.1.x before 7.1.0.0.SP0.P6 HF50, and 7.2.x before 7.2.0.…
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01149 · Published 2016-09-21 · No fix listed CWE-79
Priority LOW 26
RSA Adaptive Authentication (On-Premise) 6.0.2.1 through 7.1 P3, when using device binding in a Challenge SOAP call or using the RSA Adaptive Authentication Integration Adapters with Out-of-Band Phone (Authentify) functi…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01666 · Published 2014-12-08 · No fix listed CWE-287
Priority LOW 22
Cross-site scripting (XSS) vulnerability in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, rela…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.00977 · Published 2014-04-04 · No fix listed CWE-79
Priority LOW 22
Cross-site scripting (XSS) vulnerability in the back-office case-management application in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote authenticated users to inject arbitrary web…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.00977 · Published 2014-04-04 · No fix listed CWE-79
Priority LOW 23
Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Adaptive Authentication On-Premise (AAOP) before 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01433 · Published 2012-11-27 · No fix listed CWE-79
Priority LOW 15
Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 before SP3 P3 allows remote attackers to obtain sensitive information via unknown vectors.
CVSS 2.0LOW 2.9· Adjacent network · No auth · Interaction — · EPSS 0.00553 · Published 2012-10-10 · No fix listed
Priority LOW 32
EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly perform forensic evaluation upon receipt of device tokens from mobile apps, which might allo…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01181 · Published 2011-12-14 · No fix listed CWE-264
Priority LOW 32
EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly implement Device Recovery and Device Identification, which might allow remote attackers to b…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01181 · Published 2011-12-14 · No fix listed CWE-264
Priority LOW 35
EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not prevent reuse of authentication information during a session, which allows remote authenticated users…
CVSS 2.0HIGH 7.5· Network · Low privileges · Interaction — · EPSS 0.01289 · Published 2011-08-18 · No fix listed CWE-287
Priority LOW 23
Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise (AAOP) 2.x, 5.7.x, and 6.x allows remote attackers to inject arbitrary web script or HTML via…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01269 · Published 2011-04-22 · No fix listed CWE-79