Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Priority LOW 27

Cross-site scripting (XSS) vulnerability in the Case Management application in EMC RSA Adaptive Authentication (On-Premise) before 6.0.2.1.SP3.P4 HF210, 7.0.x and 7.1.x before 7.1.0.0.SP0.P6 HF50, and 7.2.x before 7.2.0.…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01149 Published 2016-09-21 No fix listed CWE-79
Priority LOW 26

RSA Adaptive Authentication (On-Premise) 6.0.2.1 through 7.1 P3, when using device binding in a Challenge SOAP call or using the RSA Adaptive Authentication Integration Adapters with Out-of-Band Phone (Authentify) functi…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01666 Published 2014-12-08 No fix listed CWE-287
Priority LOW 22

Cross-site scripting (XSS) vulnerability in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, rela…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00977 Published 2014-04-04 No fix listed CWE-79
Priority LOW 32

EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly perform forensic evaluation upon receipt of device tokens from mobile apps, which might allo…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01181 Published 2011-12-14 No fix listed CWE-264
Priority LOW 32

EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly implement Device Recovery and Device Identification, which might allow remote attackers to b…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01181 Published 2011-12-14 No fix listed CWE-264
Priority LOW 35

EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not prevent reuse of authentication information during a session, which allows remote authenticated users…

CVSS 2.0HIGH 7.5 Network Low privileges Interaction — EPSS 0.01289 Published 2011-08-18 No fix listed CWE-287