Lucene search
+L

83 matches found

Rapid7 Blog
Rapid7 Blog
added 2020/10/15 2:58 p.m.44 views

Fewer False Alarms, Faster Reporting: InsightVM Introduces New One-Click Fix For False Positives

Let’s talk about false positives. They’re frustrating and faulty, but also about as certain as death and taxes for anyone working in IT security. The good news? We’ve added even more ways to reduce the noise they cause. According to Forrester Consulting’s 2019 study, customers have experienced a...

7AI score
SaveExploits0
OSV
OSV
added 2020/09/03 2:15 p.m.9 views

CVE-2020-7381

In Rapid7 Nexpose installer versions prior to 6.6.40, the Nexpose installer calls an executable which can be placed in the appropriate directory by an attacker with access to the local machine. This would prevent the installer from distinguishing between a valid executable called during a Securit...

7.8CVSS7.2AI score0.00676EPSS
SaveExploits0References1
OSV
OSV
added 2020/04/15 6:15 p.m.12 views

CVE-2020-5346

RSA Authentication Manager versions prior to 8.4 P11 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript...

4.8CVSS5.8AI score0.00644EPSS
SaveExploits0References1
NVD
NVD
added 2020/04/15 6:15 p.m.27 views

CVE-2020-5346

RSA Authentication Manager versions prior to 8.4 P11 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript...

4.8CVSS4.9AI score0.00644EPSS
SaveExploits0References1
Prion
Prion
added 2020/04/15 6:15 p.m.25 views

Cross site scripting

RSA Authentication Manager versions prior to 8.4 P11 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript...

3.5CVSS4.8AI score0.00644EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/04/15 6:00 p.m.33 views

CVE-2020-5346

RSA Authentication Manager versions prior to 8.4 P11 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript...

4.8CVSS4.9AI score0.00644EPSS
SaveExploits0References1
CVE
CVE
added 2020/04/15 6:00 p.m.55 views

CVE-2020-5346

The CVE-2020-5346 issue affects RSA Authentication Manager versions prior to 8.4 P11, where a stored cross-site scripting vulnerability exists in the Security Console. A privileged Security Console administrator can store arbitrary HTML/JavaScript through the web interface, potentially executing ...

4.8CVSS4.8AI score0.00644EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/04/02 12:00 a.m.31 views

EMC RSA Authentication Manager < 8.4 P10 Multiple Vulnerabilites (DSA-2020-052)

The version of EMC RSA Authentication Manager running on the remote host is prior to 8.4 Patch 10. It is, therefore, affected by multiple vulnerabilities: - A cross-site scripting XSS vulnerability exists in Security Console due to improper validation of user-supplied input before returning it to...

4.8CVSS5.2AI score0.00669EPSS
SaveExploits0References3
OSV
OSV
added 2020/03/26 1:15 p.m.11 views

CVE-2020-5339

RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript...

4.8CVSS5.8AI score0.00669EPSS
SaveExploits0References1
OSV
OSV
added 2020/03/26 1:15 p.m.11 views

CVE-2020-5340

RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript...

4.8CVSS5.8AI score0.00669EPSS
SaveExploits0References1
NVD
NVD
added 2020/03/26 1:15 p.m.25 views

CVE-2020-5339

RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript...

4.8CVSS4.9AI score0.00669EPSS
SaveExploits0References1
NVD
NVD
added 2020/03/26 1:15 p.m.22 views

CVE-2020-5340

RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript...

4.8CVSS4.9AI score0.00669EPSS
SaveExploits0References1
Prion
Prion
added 2020/03/26 1:15 p.m.20 views

Cross site scripting

RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript...

3.5CVSS4.9AI score0.00669EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2020/03/26 1:15 p.m.22 views

Cross site scripting

RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript...

3.5CVSS4.8AI score0.00669EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/03/25 9:05 p.m.31 views

CVE-2020-5340

RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript...

4.8CVSS4.9AI score0.00669EPSS
SaveExploits0References1
CVE
CVE
added 2020/03/25 9:05 p.m.68 views

CVE-2020-5340

RSA Authentication Manager before 8.4 P10 is affected by a stored cross-site scripting (XSS) vulnerability in the Security Console. An authenticated, advanced-privilege Security Console administrator can inject arbitrary HTML/JavaScript via the Security Console web interface, and when other admin...

4.8CVSS4.9AI score0.00669EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/03/25 9:05 p.m.30 views

CVE-2020-5339

RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript...

4.8CVSS4.9AI score0.00669EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2020/03/25 12:00 a.m.12 views

PT-2020-18414 · Rsa · Emc Rsa Authentication Manager

Name of the Vulnerable Software and Affected Versions: RSA Authentication Manager versions prior to 8.4 P10 Description: The issue concerns a stored cross-site scripting vulnerability in the Security Console of RSA Authentication Manager. A malicious administrator with advanced privileges could...

4.8CVSS5AI score0.00669EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2020/03/25 12:00 a.m.11 views

PT-2020-18413 · Rsa · Emc Rsa Authentication Manager

Name of the Vulnerable Software and Affected Versions: RSA Authentication Manager versions prior to 8.4 P10 Description: The issue concerns a stored cross-site scripting vulnerability in the Security Console of RSA Authentication Manager. A malicious administrator with advanced privileges could...

4.8CVSS4.9AI score0.00669EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2020/03/23 12:00 a.m.5 views

CVE-2020-5346

RSA Authentication Manager versions prior to 8.4 P11 contain a stored cross-site scripting vulnerability in the Security Console. A malicious RSA Authentication Manager Security Console administrator with advanced privileges could exploit this vulnerability to store arbitrary HTML or JavaScript...

4.8CVSS5.1AI score0.00644EPSS
SaveExploits0References2
Rows per page
Query Builder