Known vulnerabilities in RSA Authentication Manager 8.2 SP1 Patch 4 - page 3

Vendor: RSA
Software: RSA Authentication Manager
Version: 8.2 SP1 Patch 4
Software CPE: cpe:2.3:a:rsa:rsa_authentication_manager:*:*:*:*:*:*:*:*
Website: https://www.rsa.com/
Total vulnerabilities: 51
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting RSA Authentication Manager version 8.2 SP1 Patch 4 RSA Authentication Manager 8.2 SP1 Patch 4 is affected by 51 vulnerabilities: 3 critical, 9 high, 17 medium, 22 low Critical High Medium Low

Vulnerabilities (51)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU104080 - Out-of-bounds write
CVE-2025-0624		 CWE-787 Low
No
No
 8.8 Patch 1 19.02.2025 SB202502197147
SB202502197181
SB202502197183
and 43 more
#VU103770 - Improper input validation
CVE-2025-24970		 CWE-20 Medium
No
No
 8.8 Patch 1 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU30457 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-3768		 CWE-611 Medium
No
No
 8.4 04.01.2020 SB2020010402
#VU17897 - Unprotected Storage of Credentials
CVE-2019-3711		 CWE-256 Low
No
No
 8.4 Patch 1 04.03.2019 SB2019030404
#VU13362 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1254		 CWE-79 Low
No
No
 8.3 Patch 1 15.06.2018 SB2018061510
#VU13361 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1253		 CWE-79 Low
No
No
 8.3 Patch 1 15.06.2018 SB2018061510
#VU12370 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2018-1248		 CWE-113 Low
No
No
 - 07.05.2018 SB2018050704
#VU12369 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-1247		 CWE-611 Low
Public exploit available
No
 - 07.05.2018 SB2018050704
#VU10165 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-15546		 CWE-89 Low
No
No
 - 24.01.2018 SB2018012401
#VU9394 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-14379		 CWE-79 Low
No
No
 - 21.11.2017 SB2017112204
#VU8979 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-14373		 CWE-79 Low
No
No
 - 27.10.2017 SB2017103004


Showing elements 41 - 60 out of 51