EUVD-2011-1427

Malware in sbrugna...

EUVD-2012-4536

Malware in sbrugna...

Cross site scripting

EMC RSA Adaptive Authentication On-Premise versions prior to 7.3 P2 exclusive contains a fix for a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-4978

EMC RSA Adaptive Authentication On-Premise versions prior to 7.3 P2 exclusive contains a fix for a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system...

PT-2017-16241

Name of the Vulnerable Software and Affected Versions EMC RSA Adaptive Authentication On-Premise versions prior to 7.3 P2 Description The issue is related to a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-4978: Improper Neutralization of Input During Web Page Generation

EMC RSA Adaptive Authentication On-Premise versions prior to 7.3 P2 exclusive contains a fix for a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system...

CVE-2016-0925

Cross-site scripting XSS vulnerability in the Case Management application in EMC RSA Adaptive Authentication On-Premise before 6.0.2.1.SP3.P4 HF210, 7.0.x and 7.1.x before 7.1.0.0.SP0.P6 HF50, and 7.2.x before 7.2.0.0.SP0.P0 HF20 allows remote authenticated users to inject arbitrary web script or...

CVE-2016-0925

The CVE-2016-0925 entry describes a cross-site scripting (XSS) vulnerability in the Case Management component of EMC RSA Adaptive Authentication (On-Premise). Affected versions include 6.0.2.1.SP3.P4 HF210; 7.0.x and 7.1.x before 7.1.0.0.SP0.P6 HF50; and 7.2.x before 7.2.0.0.SP0.P0 HF20. The issu...

PT-2016-4478

Name of the Vulnerable Software and Affected Versions EMC RSA Adaptive Authentication On-Premise versions prior to 6.0.2.1.SP3.P4 HF210 EMC RSA Adaptive Authentication On-Premise versions 7.0.x through 7.1.x before 7.1.0.0.SP0.P6 HF50 EMC RSA Adaptive Authentication On-Premise versions 7.2.x befo...

CVE-2016-0925: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Case Management application in EMC RSA Adaptive Authentication On-Premise before 6.0.2.1.SP3.P4 HF210, 7.0.x and 7.1.x before 7.1.0.0.SP0.P6 HF50, and 7.2.x before 7.2.0.0.SP0.P0 HF20 allows remote authenticated users to inject arbitrary web script or...

PT-2014-4740

Name of the Vulnerable Software and Affected Versions EMC RSA Adaptive Authentication Hosted version 11.0 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML. Recommendations For version 11.0, update to ...

CVE-2014-2502: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in rsafso.swf in EMC RSA Adaptive Authentication Hosted 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

EMC RSA Adaptive Authentication security vulnerabilities

Crossite scripting...

PT-2012-5515

Name of the Vulnerable Software and Affected Versions EMC RSA Adaptive Authentication On-Premise AAOP versions prior to 7.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML. This can be achieved via...

CVE-2012-4611: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in EMC RSA Adaptive Authentication On-Premise AAOP before 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2286

Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 before SP3 P3 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2012-2286: Undefined Security Weakness

Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 before SP3 P3 allows remote attackers to obtain sensitive information via unknown vectors...

PT-2012-3925

Name of the Vulnerable Software and Affected Versions EMC RSA Adaptive Authentication On-Premise AAOP versions 6.0.2.1 before SP3 P3 Description The issue allows remote attackers to obtain sensitive information. Recommendations For versions 6.0.2.1 before SP3 P3, update to a version that includes...

CVE-2011-2741

EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly implement Device Recovery and Device Identification, which might allow remote attackers to bypass intended security restrictions on a 1 previously non-registered device or...

CVE-2011-2742

EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly perform forensic evaluation upon receipt of device tokens from mobile apps, which might allow remote attackers to bypass intended application restrictions via a mobile...