CVE-2015-4540

The CVE-2015-4540 entry refers to stored Cross-Site Scripting vulnerabilities in EMC RSA Identity Management & Governance (IMG), affecting RSA IMG versions prior to 6.9.1 P6 and prior to 6.8.1 P18. The issue is described as an XSS vulnerability that could allow remote authenticated users to injec...

CVE-2017-5003

CVE-2017-5003 affects EMC RSA Identity Governance and Lifecycle 7.0.1/7.0.2 (all patch levels); RSA Via Lifecycle and Governance 7.0 (all patch levels); RSA Identity Management and Governance (IMG) 6.9.1 (all patch levels). It is a Reflected Cross-Site Scripting vulnerability that could enable a ...

CVE-2017-8004

The CVE concerns EMC RSA products (RSA Identity Governance and Lifecycle; RSA Via Lifecycle and Governance; RSA Identity Management and Governance) with affected versions: Identity Governance and Lifecycle 7.0.1/7.0.2 (all patch levels); Via Lifecycle and Governance 7.0 (all patch levels); RSA IM...

CVE-2018-1182

CVE-2018-1182 affects EMC RSA Identity Governance and Lifecycle (versions 7.0.1 and 7.0.2), RSA Via Lifecycle and Governance (version 7.0), and RSA Identity Management & Governance (RSA IMG) (versions 6.9.0 and 6.9.1). The issue allows certain OS-level users to execute arbitrary scripts with root...

CVE-2017-5004

EMC RSA identity-related products are affected by Stored Cross Site Scripting vulnerabilities: RSA Identity Governance and Lifecycle (version 7.0.1 and 7.0.2 across all patch levels), RSA Via Lifecycle and Governance (version 7.0), and RSA Identity Management and Governance (IMG) (version 6.9.1 a...

CVE-2017-8005

The CVE-2017-8005 entry affects EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA Identity Management and Governance (IMG). Affected are RSA Identity Governance and Lifecycle versions 7.0.1 and 7.0.2 (all patch levels); RSA Via Lifecycle and Governance version 7...

CVE-2018-11049

The CVE-2018-11049 entry describes an uncontrolled search path vulnerability affecting Dell RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG. Root cause: installation scripts set an environment variable in an unintended manner, enabling a local authenticated us...

CVE-2015-0532

RSA Identity Management and Governance (IMG) 6.9 before P04 and 6.9.1 before P01 are affected by an insecure password reset vulnerability where a weakness in the password reset process may allow an attacker to gain access by submitting a reset operation for an arbitrary legitimate account name. P...

CVE-2015-4539

CVE-2015-4539 concerns EMC RSA Identity Management & Governance (IMG) prior to version 7.0.0, with multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary script/HTML via unspecified vectors. The issue (Reflected XSS) is documented across multiple sourc...

CVE-2014-4619

RSA IMG (EMC RSA Identity Management and Governance) 6.5.x and 6.8.x are affected when Novell Identity Manager is used, enabling authentication bypass with a valid username. Root cause: authentication bypass due to NovellIM-based setup; no password required for legitimate users. Affected versions...

CVE-2016-0918

CVE-2016-0918 affects EMC RSA Identity Management and Governance before 6.8.1 P25 and 6.9.x before 6.9.1 P15, and RSA Via Lifecycle and Governance before 7.0.0 P04. The vulnerability allows remote authenticated users to obtain User Detail Popup information via a modified URL. Connected documents ...