Known vulnerabilities in RSA Authentication Manager 8.3 Patch 1 - page 3

Vendor: RSA

Software: RSA Authentication Manager

Version: 8.3 Patch 1

Software CPE: cpe:2.3:a:rsa:rsa_authentication_manager:*:*:*:*:*:*:*:*

Website: https://www.rsa.com/

Total vulnerabilities: 49

Public exploits: 4

Known exploited (KEV): 2

Highest CVSSv4 Score: 9.3

Vulnerabilities (49)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU107520 - Improper input validation CVE-2025-21587	CWE-20	Medium	No	No	8.8 Patch 1	16.04.2025	SB20250416145 SB20250416146 SB20250416147 and 103 more
#VU104079 - Use After Free CVE-2025-0622	CWE-416	Low	No	No	8.8 Patch 1	19.02.2025	SB202502197147 SB202502197181 SB202502197183 and 19 more
#VU30457 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2019-3768	CWE-611	Medium	No	No	8.4	04.01.2020	SB2020010402
#VU17897 - Unprotected Storage of Credentials CVE-2019-3711	CWE-256	Low	No	No	8.4 Patch 1	04.03.2019	SB2019030404
#VU14908 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-11075	CWE-79	Low	No	No	8.3 Patch 3	24.09.2018	SB2018092109
#VU14907 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-11074	CWE-79	Low	No	No	8.3 Patch 3	24.09.2018	SB2018092109
#VU14906 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-11073	CWE-79	Low	No	No	8.3 Patch 3	24.09.2018	SB2018092109
#VU13362 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-1254	CWE-79	Low	No	No	8.3 Patch 1	15.06.2018	SB2018061510
#VU13361 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-1253	CWE-79	Low	No	No	8.3 Patch 1	15.06.2018	SB2018061510

Showing elements 41 - 60 out of 49