EUVD-2012-4538

Malware in sbrugna...

EUVD-2012-4537

Malware in sbrugna...

EMC RSA Data Protection Manager Appliance security vulnerabilities

TLS session renegotiation vulnerability, crossite scripting...

PT-2013-4281

Name of the Vulnerable Software and Affected Versions EMC RSA Data Protection Manager DPM appliance versions 3.2.x through 3.2.4.1 EMC RSA Data Protection Manager DPM appliance versions 3.5.x through 3.5.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary we...

CVE-2013-3288: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability on the EMC RSA Data Protection Manager DPM appliance 3.2.x before 3.2.4.2 and 3.5.x before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2012-4613

EMC RSA Data Protection Manager Appliance 2.7.x and 3.x before 3.2.1 does not properly restrict the number of authentication attempts by a user account, which makes it easier for local users to bypass intended access restrictions via a brute-force attack...

Authentication flaw

EMC RSA Data Protection Manager Appliance 2.7.x and 3.x before 3.2.1 does not properly restrict the number of authentication attempts by a user account, which makes it easier for local users to bypass intended access restrictions via a brute-force attack...

CVE-2012-4613

EMC RSA Data Protection Manager Appliance 2.7.x and 3.x before 3.2.1 does not properly restrict the number of authentication attempts by a user account, which makes it easier for local users to bypass intended access restrictions via a brute-force attack...

PT-2012-5516

Name of the Vulnerable Software and Affected Versions EMC RSA Data Protection Manager Appliance and Software Server versions 2.7.x through 3.2.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For...

CVE-2012-4612: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in EMC RSA Data Protection Manager Appliance and Software Server 2.7.x and 3.x before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-4613: Improper Authentication

EMC RSA Data Protection Manager Appliance 2.7.x and 3.x before 3.2.1 does not properly restrict the number of authentication attempts by a user account, which makes it easier for local users to bypass intended access restrictions via a brute-force attack...

PT-2012-5517

Name of the Vulnerable Software and Affected Versions EMC RSA Data Protection Manager Appliance versions 2.7.x through 3.x before 3.2.1 Description The issue allows local users to bypass intended access restrictions via a brute-force attack because the software does not properly restrict the numb...