CVE-2012-0401

RSA enVision 4.x (EMC) contains multiple SQL injection vulnerabilities tracked as CVE-2012-0401, prior to version 4.1 Patch 4. The issue affects RSA enVision 4.x, with the root cause described as SQL injection in multiple components, permitting remote authenticated users to execute arbitrary SQL ...

CVE-2008-6886

Technical details of CVE-2008-6886 are not publicly provided in the supplied documents. Monitor for updates; no explicit affected products, versions, or fixes are disclosed here.

CVE-2010-2634

RSA enVision versions prior to 3.7 SP1 are affected. The issue stems from insufficient input validation and can allow remote authenticated users to cause a denial of service. Affected product/versions: RSA enVision before 3.7 SP1 (per multiple sources). Impact: denial of service. Remediation: upg...

CVE-2011-2736

RSA enVision 4.x before 4 SP4 P3 is affected by CVE-2011-2736. Task Escalation emails may contain cleartext administrative credentials, allowing remote attackers to obtain sensitive information by sniffing the network or via access to a recipient mailbox. The related advisory ESA-2011-030 documen...

CVE-2012-0402

CVE-2012-0402 affects EMC RSA enVision 4.x prior to 4.1 Patch 4, which uses unspecified hardcoded credentials that could allow a remote attacker to gain access via unknown vectors. The vulnerability is within RSA enVision’s authentication surface, with a CVSS Base Score of 9.3 (High) per NVD. Aff...

CVE-2007-4900

CVE-2007-4900 describes a cross-site scripting (XSS) flaw in the logon page of RSA EnVision 3.3.6 Build 0115. The issue allows an attacker to inject arbitrary script/HTML via the username field, potentially enabling user-side script execution in a victim’s browser. The connected records confirm t...

CVE-2012-0399

EMC RSA enVision 4.x is affected by multiple cross-site scripting (XSS) vulnerabilities identified as CVE-2012-0399, present in versions prior to 4.1 Patch 4. An attacker could inject arbitrary web script or HTML via unspecified vectors, with impact limited to integrity. The documented fix is upg...

CVE-2012-0403

EMC RSA enVision 4.x is affected by CVE-2012-0403: a directory traversal vulnerability that enables remote authenticated users to cause an unspecified impact via unknown vectors. Affected product: RSA enVision before 4.1 Patch 4. Root cause and impact are described as directory traversal with a b...

CVE-2011-2737

RSA enVision 3.x and 4.x prior to 4 SP4 P3 contain an arbitrary file retrieval vulnerability (CVE-2011-2737) that may allow unauthenticated remote attackers to read files via unspecified vectors. The issue is acknowledged in RSA ESA-2011-030, which recommends upgrading to RSA enVision 4 SP4 P3 as...

CVE-2011-4143

Summary of CVE-2011-4143 : Affected product is RSA enVision 4.x (4.0 SP4 P5 and 4.1 before P3). The issue is an environmental variable information disclosure vulnerability that could allow an unauthenticated, remote attacker to obtain sensitive details about the environment variables in the web s...

CVE-2012-0400

CVE-2012-0400 affects EMC RSA enVision 4.x (before 4.1 Patch 4). The root cause is improper restriction of the number of failed authentication attempts, enabling brute-force-style remote access. The entry’s impact is a complete breach of confidentiality, integrity, and availability for affected s...