Known vulnerabilities in RSA Authentication Manager 8.7 SP2 Patch 4 - page 3

Vendor: RSA
Software: RSA Authentication Manager
Version: 8.7 SP2 Patch 4
Software CPE: cpe:2.3:a:rsa:rsa_authentication_manager:*:*:*:*:*:*:*:*
Website: https://www.rsa.com/
Total vulnerabilities: 91
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting RSA Authentication Manager version 8.7 SP2 Patch 4 RSA Authentication Manager 8.7 SP2 Patch 4 is affected by 91 vulnerabilities: 3 critical, 15 high, 41 medium, 32 low Critical High Medium Low

Vulnerabilities (91)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107520 - Improper input validation
CVE-2025-21587		 CWE-20 Medium
No
No
 8.8 Patch 1 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 103 more
#VU103648 - Exposure of sensitive information to an unauthorized actor
CVE-2025-0167		 CWE-200 Low
No
No
 8.7 SP2 Patch 6 05.02.2025 SB2025020531
SB2025020601
SB2025020658
and 20 more
#VU103646 - Integer overflow
CVE-2025-0725		 CWE-190 High
No
No
 8.7 SP2 Patch 6 05.02.2025 SB2025020531
SB2025020601
SB2025020658
and 25 more
#VU103600 - Covert Timing Channel
CVE-2024-13176		 CWE-385 Medium
No
No
 8.7 SP2 Patch 6 04.02.2025 SB2025020454
SB2025020456
SB2025020656
and 59 more
#VU103240 - Heap-based Buffer Overflow
CVE-2025-20128		 CWE-122 Medium
No
No
 8.7 SP2 Patch 6 22.01.2025 SB2025012288
SB2025012289
SB2025012778
and 5 more
#VU103159 - Improper input validation
CVE-2025-21502		 CWE-20 Medium
No
No
 8.7 SP2 Patch 6 21.01.2025 SB2025012221
SB2025012222
SB2025012223
and 44 more
#VU103148 - Improper input validation
CVE-2025-21535		 CWE-20 High
No
No
 8.7 SP2 Patch 6 21.01.2025 SB2025012238
SB2025051252
#VU103150 - Improper input validation
CVE-2025-21549		 CWE-20 Medium
No
No
 8.7 SP2 Patch 6 21.01.2025 SB2025012238
SB2025051252
#VU102736 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12088		 CWE-22 Medium
No
No
 8.7 SP2 Patch 6 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 65 more
#VU102734 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12087		 CWE-22 Medium
No
No
 8.7 SP2 Patch 6 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 74 more
#VU102732 - Exposure of sensitive information to an unauthorized actor
CVE-2024-12086		 CWE-200 Medium
No
No
 8.7 SP2 Patch 6 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 37 more
#VU100514 - Improper Authorization
CVE-2024-10979		 CWE-285 High
No
No
 8.7 SP2 Patch 6 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 65 more
#VU100513 - Incorrect Privilege Assignment
CVE-2024-10978		 CWE-266 Medium
No
No
 8.7 SP2 Patch 6 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 46 more
#VU100512 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2024-10977		 CWE-300 Low
No
No
 8.7 SP2 Patch 6 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 34 more
#VU100511 - Improper Privilege Management
CVE-2024-10976		 CWE-269 Medium
No
No
 8.7 SP2 Patch 6 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 47 more
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 8.7 SP2 Patch 6 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 132 more
#VU94762 - Incorrect Authorization
CVE-2024-41110		 CWE-863 Medium
No
No
 8.7 SP2 Patch 6 26.07.2024 SB2024072641
SB2024080330
SB2024080739
and 39 more
#VU89218 - Resource exhaustion
CVE-2024-29857		 CWE-400 Medium
No
No
 8.7 SP2 Patch 6 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU79633 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-20197		 CWE-835 Medium
No
No
 8.7 SP1 Patch 3, 8.7 SP2 Patch 1, 8.7 SP2 Patch 6 16.08.2023 SB20230816163
SB20230821217
SB20230821218
and 21 more
#VU14162 - Stack-based buffer overflow
CVE-2018-14679		 CWE-121 Low
No
No
 8.7 SP2 Patch 6 01.08.2018 SB2018080114
SB2018080302
SB2018080606
and 21 more


Showing elements 41 - 60 out of 91