Known vulnerabilities in RSA Authentication Manager 8.7 SP2 Patch 5 - page 3

Vendor: RSA
Software: RSA Authentication Manager
Version: 8.7 SP2 Patch 5
Software CPE: cpe:2.3:a:rsa:rsa_authentication_manager:*:*:*:*:*:*:*:*
Website: https://www.rsa.com/
Total vulnerabilities: 78
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting RSA Authentication Manager version 8.7 SP2 Patch 5 RSA Authentication Manager 8.7 SP2 Patch 5 is affected by 78 vulnerabilities: 3 critical, 13 high, 37 medium, 25 low Critical High Medium Low

Vulnerabilities (78)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107520 - Improper input validation
CVE-2025-21587		 CWE-20 Medium
No
No
 8.8 Patch 1 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 103 more
#VU103646 - Integer overflow
CVE-2025-0725		 CWE-190 High
No
No
 8.7 SP2 Patch 6 05.02.2025 SB2025020531
SB2025020601
SB2025020658
and 25 more
#VU103159 - Improper input validation
CVE-2025-21502		 CWE-20 Medium
No
No
 8.7 SP2 Patch 6 21.01.2025 SB2025012221
SB2025012222
SB2025012223
and 44 more
#VU103148 - Improper input validation
CVE-2025-21535		 CWE-20 High
No
No
 8.7 SP2 Patch 6 21.01.2025 SB2025012238
SB2025051252
#VU103150 - Improper input validation
CVE-2025-21549		 CWE-20 Medium
No
No
 8.7 SP2 Patch 6 21.01.2025 SB2025012238
SB2025051252
#VU102739 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-12747		 CWE-362 Low
No
No
 8.7 SP2 Patch 6 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 56 more
#VU102736 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12088		 CWE-22 Medium
No
No
 8.7 SP2 Patch 6 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 65 more
#VU102734 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12087		 CWE-22 Medium
No
No
 8.7 SP2 Patch 6 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 74 more
#VU102732 - Exposure of sensitive information to an unauthorized actor
CVE-2024-12086		 CWE-200 Medium
No
No
 8.7 SP2 Patch 6 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 37 more
#VU102730 - Use of Uninitialized Variable
CVE-2024-12085		 CWE-457 Medium
No
No
 8.7 SP2 Patch 6 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 92 more
#VU100514 - Improper Authorization
CVE-2024-10979		 CWE-285 High
No
No
 8.7 SP2 Patch 6 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 65 more
#VU100512 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2024-10977		 CWE-300 Low
No
No
 8.7 SP2 Patch 6 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 34 more
#VU100511 - Improper Privilege Management
CVE-2024-10976		 CWE-269 Medium
No
No
 8.7 SP2 Patch 6 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 47 more
#VU99220 - Improper input validation
CVE-2024-49974		 CWE-20 Low
No
No
 8.7 SP2 Patch 6 22.10.2024 SB20241022332
SB2024110167
SB2024110169
and 66 more
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 8.7 SP2 Patch 6 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 132 more
#VU94762 - Incorrect Authorization
CVE-2024-41110		 CWE-863 Medium
No
No
 8.7 SP2 Patch 6 26.07.2024 SB2024072641
SB2024080330
SB2024080739
and 39 more
#VU89218 - Resource exhaustion
CVE-2024-29857		 CWE-400 Medium
No
No
 8.7 SP2 Patch 6 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU86736 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-23635		 CWE-79 Low
No
No
 8.7 SP2 Patch 6 22.02.2024 SB2024022233
SB2024041739
SB2024041754
and 6 more
#VU84507 - Resource exhaustion
CVE-2023-47108		 CWE-400 Medium
No
No
 8.7 SP2 Patch 5, 8.7 SP2 Patch 6 18.12.2023 SB2023121825
SB2023122137
SB2024010436
and 55 more
#VU83546 - Resource exhaustion
CVE-2023-45142		 CWE-400 Medium
No
No
 8.7 SP2 Patch 5, 8.7 SP2 Patch 6 29.11.2023 SB2023112912
SB2023112913
SB2023112949
and 54 more


Showing elements 41 - 60 out of 78