CVE-2017-8000: Improper Neutralization of Input During Web Page Generation

In EMC RSA Authentication Manager 8.2 SP1 and earlier, a malicious RSA Security Console Administrator could craft a token profile and store the profile name in the RSA Authentication Manager database. The profile name could include a crafted script with an XSS payload that could be executed when...