ESA-2013-077: RSA Data Protection Manager Appliance Multiple Vulnerabilities

ESA-2013-077.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-077: RSA Data Protection Manager Appliance Multiple Vulnerabilities EMC Identifier: ESA-2013-077 CVE Identifier: CVE-2013-3288, CVE-2009-3555 Severity Rating: See below for individual scores and refer to vendor advisories for...

CVE-2013-3288

RSA Data Protection Manager Appliance (3.2.x before 3.2.4.2; 3.5.x before 3.5.1) is affected by a DOM-based Cross-Site Scripting vulnerability (CVE-2013-3288). An attacker could lure an authenticated user to click a crafted URL, potentially causing execution of malicious scripts in the user’s bro...