Lucene search

[email protected]CVE-2012-2278

HistoryJul 13, 2012 - 9:55 p.m.

CVE-2012-2278

2012-07-1321:55:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2012-2278

xss

emc

rsa

authentication manager

securid appliance

security

remote attack

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

46.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the (1) Self-Service Console and (2) Security Console in EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
rsa:authentication_managerrsa authentication managereq7.1
emc:rsa_authentication_manageremc rsa authentication managereq7.0
emc:rsa_authentication_manageremc rsa authentication managereq7.1
rsa:securid_appliancersa securid applianceeq3.0
rsa:securid_appliancersa securid applianceeq2.0
rsa:securid_appliancersa securid applianceeq2.0.1
rsa:securid_appliancersa securid applianceeq2.0.2

CPE	Name	Operator	Version
rsa:authentication_manager	rsa authentication manager	eq	7.1
emc:rsa_authentication_manager	emc rsa authentication manager	eq	7.0
emc:rsa_authentication_manager	emc rsa authentication manager	eq	7.1
rsa:securid_appliance	rsa securid appliance	eq	3.0
rsa:securid_appliance	rsa securid appliance	eq	2.0
rsa:securid_appliance	rsa securid appliance	eq	2.0.1
rsa:securid_appliance	rsa securid appliance	eq	2.0.2

References

archives.neohapsis.com/archives/bugtraq/2012-07/0064.html

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

46.4%

JSON

Related for CVE-2012-2278

prion1 cvelist1 securityvulns2