CVE-2014-0637

2014-04-0415:09:05

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

50.8%

JSON

Cross-site scripting (XSS) vulnerability in the back-office case-management application in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

Nvd

Node

emcrsa_adaptive_authentication_on-premiseMatch6.0

emcrsa_adaptive_authentication_on-premiseMatch6.0.2.1

emcrsa_adaptive_authentication_on-premiseMatch6.0.2.1sp1_patch2

emcrsa_adaptive_authentication_on-premiseMatch6.0.2.1sp1_patch3

emcrsa_adaptive_authentication_on-premiseMatch6.0.2.1sp2

emcrsa_adaptive_authentication_on-premiseMatch6.0.2.1sp2_patch1

emcrsa_adaptive_authentication_on-premiseMatch6.0.2.1sp3

emcrsa_adaptive_authentication_on-premiseMatch6.0.2.1sp3_p3

emcrsa_adaptive_authentication_on-premiseMatch7.0

emcrsa_adaptive_authentication_on-premiseMatch7.1

VendorProductVersionCPE
emcrsa_adaptive_authentication_on-premise6.0cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0:*:*:*:*:*:*:*
emcrsa_adaptive_authentication_on-premise6.0.2.1cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:*:*:*:*:*:*:*
emcrsa_adaptive_authentication_on-premise6.0.2.1cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp1_patch2:*:*:*:*:*:*
emcrsa_adaptive_authentication_on-premise6.0.2.1cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp1_patch3:*:*:*:*:*:*
emcrsa_adaptive_authentication_on-premise6.0.2.1cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp2:*:*:*:*:*:*
emcrsa_adaptive_authentication_on-premise6.0.2.1cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp2_patch1:*:*:*:*:*:*
emcrsa_adaptive_authentication_on-premise6.0.2.1cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp3:*:*:*:*:*:*
emcrsa_adaptive_authentication_on-premise6.0.2.1cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp3_p3:*:*:*:*:*:*
emcrsa_adaptive_authentication_on-premise7.0cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:7.0:*:*:*:*:*:*:*
emcrsa_adaptive_authentication_on-premise7.1cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:7.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
emc	rsa_adaptive_authentication_on-premise	6.0	cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0:::::::*
emc	rsa_adaptive_authentication_on-premise	6.0.2.1	cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:::::::*
emc	rsa_adaptive_authentication_on-premise	6.0.2.1	cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp1_patch2::::::
emc	rsa_adaptive_authentication_on-premise	6.0.2.1	cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp1_patch3::::::
emc	rsa_adaptive_authentication_on-premise	6.0.2.1	cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp2::::::
emc	rsa_adaptive_authentication_on-premise	6.0.2.1	cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp2_patch1::::::
emc	rsa_adaptive_authentication_on-premise	6.0.2.1	cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp3::::::
emc	rsa_adaptive_authentication_on-premise	6.0.2.1	cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:6.0.2.1:sp3_p3::::::
emc	rsa_adaptive_authentication_on-premise	7.0	cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:7.0:::::::*
emc	rsa_adaptive_authentication_on-premise	7.1	cpe:2.3:a:emc:rsa_adaptive_authentication_on-premise:7.1:::::::*