CVE-2018-1254: Improper Neutralization of Input During Web Page Generation

RSA Authentication Manager Security Console, versions 8.3 P1 and earlier, contains a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim Security Console administrator to supply malicious HTML or...

PT-2018-11242

Name of the Vulnerable Software and Affected Versions RSA Authentication Manager Security Console versions 8.3 P1 and earlier Description The issue allows a remote unauthenticated attacker to potentially exploit a reflected cross-site scripting vulnerability by tricking a Security Console...

CVE-2018-1247: Improper Restriction of XML External Entity Reference

RSA Authentication Manager Security Console, version 8.3 and earlier, contains a XML External Entity XXE vulnerability. This could potentially allow admin users to cause a denial of service or extract server data via injecting a maliciously crafted DTD in an XML file submitted to the application...

PT-2018-11201

Name of the Vulnerable Software and Affected Versions RSA Authentication Manager Security Console versions 8.3 and earlier Description The issue allows admin users to potentially cause a denial of service or extract server data by injecting a maliciously crafted DTD in an XML file submitted to th...