CVE-2012-4612

CVE-2012-4612 is an XSS vulnerability in RSA Data Protection Manager Appliance and Software Server 2.7.x and 3.x prior to 3.2.1. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. According to the primary sources, affected products include RSA DPM Ap...

CVE-2012-4613

The CVE-2012-4613 entry concerns EMC RSA Data Protection Manager Appliance 2.7.x and 3.x prior to 3.2.1. The vulnerability is an improper restriction of authentication attempts, enabling local brute-force-style bypass of authentication. Affected component is the authentication mechanism; root cau...

CVE-2013-3288

RSA Data Protection Manager Appliance (3.2.x before 3.2.4.2; 3.5.x before 3.5.1) is affected by a DOM-based Cross-Site Scripting vulnerability (CVE-2013-3288). An attacker could lure an authenticated user to click a crafted URL, potentially causing execution of malicious scripts in the user’s bro...