CVE-2018-1254

RSA Authentication Manager Security Console, versions 8.3 P1 and earlier, contains a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim Security Console administrator to supply malicious HTML or...

CVE-2017-8000: Improper Neutralization of Input During Web Page Generation

In EMC RSA Authentication Manager 8.2 SP1 and earlier, a malicious RSA Security Console Administrator could craft a token profile and store the profile name in the RSA Authentication Manager database. The profile name could include a crafted script with an XSS payload that could be executed when...

RSA Security Console Detection

The remote web server hosts RSA Security Console, which is used with RSA appliances to manage users and tokens, perform real-time authentication monitoring, log access, define password policies, etc. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55508;...