Known vulnerabilities in RSA Authentication Manager 8.2 SP1 Patch 5 - page 3

Vendor: RSA

Software: RSA Authentication Manager

Version: 8.2 SP1 Patch 5

Software CPE: cpe:2.3:a:rsa:rsa_authentication_manager:*:*:*:*:*:*:*:*

Website: https://www.rsa.com/

Total vulnerabilities: 50

Public exploits: 5

Known exploited (KEV): 2

Highest CVSSv4 Score: 9.3

Vulnerabilities (50)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU107520 - Improper input validation CVE-2025-21587	CWE-20	Medium	No	No	8.8 Patch 1	16.04.2025	SB20250416145 SB20250416146 SB20250416147 and 103 more
#VU104079 - Use After Free CVE-2025-0622	CWE-416	Low	No	No	8.8 Patch 1	19.02.2025	SB202502197147 SB202502197181 SB202502197183 and 19 more
#VU30457 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2019-3768	CWE-611	Medium	No	No	8.4	04.01.2020	SB2020010402
#VU17897 - Unprotected Storage of Credentials CVE-2019-3711	CWE-256	Low	No	No	8.4 Patch 1	04.03.2019	SB2019030404
#VU13362 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-1254	CWE-79	Low	No	No	8.3 Patch 1	15.06.2018	SB2018061510
#VU13361 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-1253	CWE-79	Low	No	No	8.3 Patch 1	15.06.2018	SB2018061510
#VU12370 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2018-1248	CWE-113	Low	No	No	-	07.05.2018	SB2018050704
#VU12369 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2018-1247	CWE-611	Low	Public exploit available	No	-	07.05.2018	SB2018050704
#VU10165 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2017-15546	CWE-89	Low	No	No	-	24.01.2018	SB2018012401
#VU9394 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2017-14379	CWE-79	Low	No	No	-	21.11.2017	SB2017112204

Showing elements 41 - 60 out of 50