CVE-2015-0522

EMC RSA Certificate Manager (RCM) and RSA Registration Manager (RRM) are affected by a stored cross-site scripting (XSS) vulnerability (CVE-2015-0522) in the email address parameter. Products affected: RCM and RRM prior to version 6.9 Build 558. An unauthenticated remote attacker could inject arb...

CVE-2015-0521

CVE-2015-0521 is a stored XSS vulnerability affecting EMC RSA Certificate Manager (RCM) and RSA Registration Manager (RRM) prior to 6.9 Build 558. The issue involves the CMP shared secret parameter and can be exploited by remote authenticated users to inject arbitrary HTML/script in a user’s brow...

CVE-2015-0523

EMC RSA Certificate Manager (RCM) and RSA Registration Manager (RRM) prior to 6.9 Build 558 are affected by a denial-of-service vulnerability in the Administration Server triggered by processing an invalid MIME e-mail message with a multipart/* Content-Type header. The issue, CVE-2015-0523, allow...

CVE-2015-4546

EMC RSA OneStep 6.9 prior to Build 559 contains a path traversal vulnerability exploitable by a remote unauthenticated attacker via the KCSOSC_ERROR_PAGE parameter, potentially allowing reading of arbitrary files outside the installation directory. This affects RSA OneStep components used in RSA ...

CVE-2018-11051

RSA Certificate Manager Versions 6.9 build 560 through 6.9 build 564 are affected by a path traversal vulnerability in the CMP Enroll Server and the REST Enroll Server. The underlying issue is a path traversal via manipulated input parameters, allowing a remote unauthenticated attacker to read fi...