Known vulnerabilities in RSA Authentication Manager 8.2 SP1 Patch 7 - page 3

Vendor: RSA
Software: RSA Authentication Manager
Version: 8.2 SP1 Patch 7
Software CPE: cpe:2.3:a:rsa:rsa_authentication_manager:*:*:*:*:*:*:*:*
Website: https://www.rsa.com/
Total vulnerabilities: 48
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting RSA Authentication Manager version 8.2 SP1 Patch 7 RSA Authentication Manager 8.2 SP1 Patch 7 is affected by 48 vulnerabilities: 3 critical, 9 high, 17 medium, 19 low Critical High Medium Low

Vulnerabilities (48)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU104531 - Out-of-bounds read
CVE-2022-49051		 CWE-125 Low
No
No
 8.8 Patch 1 26.02.2025 SB20250226349
SB2025032664
SB2025040916
and 6 more
#VU81923 - Use After Free
CVE-2023-1192		 CWE-416 Low
No
No
 8.7 SP2 Patch 4, 8.8 Patch 1 11.10.2023 SB2023101181
SB2023101185
SB2023101186
and 51 more
#VU30457 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-3768		 CWE-611 Medium
No
No
 8.4 04.01.2020 SB2020010402
#VU17897 - Unprotected Storage of Credentials
CVE-2019-3711		 CWE-256 Low
No
No
 8.4 Patch 1 04.03.2019 SB2019030404
#VU13362 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1254		 CWE-79 Low
No
No
 8.3 Patch 1 15.06.2018 SB2018061510
#VU13361 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1253		 CWE-79 Low
No
No
 8.3 Patch 1 15.06.2018 SB2018061510
#VU12370 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2018-1248		 CWE-113 Low
No
No
 - 07.05.2018 SB2018050704
#VU12369 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-1247		 CWE-611 Low
Public exploit available
No
 - 07.05.2018 SB2018050704


Showing elements 41 - 60 out of 48