Known vulnerabilities in RSA Authentication Manager - page 17

Vendor: RSA
Software: RSA Authentication Manager
Software CPE: cpe:2.3:a:rsa:rsa_authentication_manager:*:*:*:*:*:*:*:*
Website: https://www.rsa.com/
Total vulnerabilities: 345
Public exploits: 33
Known exploited (KEV): 10

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting RSA Authentication Manager RSA Authentication Manager is affected by 345 known vulnerabilities: 5 critical, 59 high, 154 medium, 127 low Critical High Medium Low

Vulnerabilities (345)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96493 - Improper input validation
CVE-2024-43883		 CWE-20 Low
No
No
 8.7 SP2 Patch 5 24.08.2024 SB2024082403
SB2024090668
SB2024090669
and 43 more
#VU96290 - Missing release of memory after effective lifetime
CVE-2024-43861		 CWE-401 Low
No
No
 8.7 SP2 Patch 5 21.08.2024 SB2024082117
SB2024083048
SB2024083049
and 149 more
#VU94432 - Out-of-bounds read
CVE-2022-48805		 CWE-125 Low
No
No
 8.7 SP2 Patch 5 17.07.2024 SB2024071751
SB2024081370
SB2024081372
and 14 more
#VU94326 - Use After Free
CVE-2023-52885		 CWE-416 Low
No
No
 8.7 SP2 Patch 5 14.07.2024 SB2024071401
SB2024080717
SB2024080718
and 31 more
#VU94203 - Missing release of memory after effective lifetime
CVE-2024-40910		 CWE-401 Low
No
No
 8.7 SP2 Patch 5 13.07.2024 SB2024071303
SB2024071701
SB2024080968
and 42 more
#VU34461 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5346		 CWE-79 Low
No
No
 8.4 Patch 11 15.04.2020 SB2020041526
#VU30322 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5339		 CWE-79 Low
No
No
 8.4 Patch 10 26.03.2020 SB2020010402
#VU30323 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5340		 CWE-79 Low
No
No
 8.4 Patch 10 26.03.2020 SB2020010402
#VU30457 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-3768		 CWE-611 Medium
No
No
 8.4 04.01.2020 SB2020010402
#VU17897 - Unprotected Storage of Credentials
CVE-2019-3711		 CWE-256 Low
No
No
 8.4 Patch 1 04.03.2019 SB2019030404
#VU14908 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-11075		 CWE-79 Low
No
No
 8.3 Patch 3 24.09.2018 SB2018092109
#VU14907 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-11074		 CWE-79 Low
No
No
 8.3 Patch 3 24.09.2018 SB2018092109
#VU14906 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-11073		 CWE-79 Low
No
No
 8.3 Patch 3 24.09.2018 SB2018092109
#VU13362 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1254		 CWE-79 Low
No
No
 8.3 Patch 1 15.06.2018 SB2018061510
#VU13361 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1253		 CWE-79 Low
No
No
 8.3 Patch 1 15.06.2018 SB2018061510
#VU12370 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2018-1248		 CWE-113 Low
No
No
 - 07.05.2018 SB2018050704
#VU12369 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-1247		 CWE-611 Low
Available
No
 - 07.05.2018 SB2018050704
#VU574 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-0925		 CWE-20 Low
No
No
 - 21.09.2016 SB2016092113
#VU41013 - Improper input validation
CVE-2014-2516		 CWE-20 Medium
No
No
 - 12.12.2014 SB2014121207
#VU41888 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-0623		 CWE-79 Low
No
No
 - 27.03.2014 SB2014032704


Showing elements 321 - 340 out of 345