EUVD-2013-6009

Malware in sbrugna...

EUVD-2016-9063

Malware in sbrugna...

CVE-2016-8215: Improper Neutralization of Input During Web Page Generation

EMC RSA Security Analytics 10.5.3 and 10.6.2 contains fixes for a Reflected Cross-Site Scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system...

PT-2017-9534

Name of the Vulnerable Software and Affected Versions EMC RSA Security Analytics versions prior to 10.5.3 EMC RSA Security Analytics versions prior to 10.6.2 Description A Reflected Cross-Site Scripting issue could potentially be exploited by malicious users to compromise the affected system...

EMC RSA Security Analytics vulnerabilities

Privilege escalation...

CVE-2013-6180

EMC RSA Security Analytics SA 10.x before 10.3, and RSA NetWitness NextGen 9.8, does not ensure that SA Core requests originate from the SA REST UI, which allows remote attackers to bypass intended access restrictions by sending a Core request from a web browser or other unintended user agent...

PT-2013-5964

Name of the Vulnerable Software and Affected Versions EMC RSA Security Analytics SA versions prior to 10.3 RSA NetWitness NextGen version 9.8 Description The issue allows remote attackers to bypass intended access restrictions by sending a Core request from a web browser or other unintended user...

CVE-2013-6180: Undefined Security Weakness

EMC RSA Security Analytics SA 10.x before 10.3, and RSA NetWitness NextGen 9.8, does not ensure that SA Core requests originate from the SA REST UI, which allows remote attackers to bypass intended access restrictions by sending a Core request from a web browser or other unintended user agent...