CVE-2017-14373

Опубликовано: 31 окт. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

EMC RSA Authentication Manager 8.2 SP1 P4 and earlier contains a reflected cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system.

Ссылки

http://seclists.org/fulldisclosure/2017/Oct/62
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/101605
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039680
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2017/Oct/62
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/101605
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039680
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:emc:rsa_authentication_manager:*:sp1:*:*:*:*:*:*

Версия до 8.2 (включая)

EPSS

Процентиль: 48%

0.0025

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-9jx5-hj98-3vhp