Known vulnerabilities in RSA Authentication Manager - page 17

Vendor: RSA
Software: RSA Authentication Manager
Software CPE: cpe:2.3:a:rsa:rsa_authentication_manager:*:*:*:*:*:*:*:*
Website: https://www.rsa.com/
Total vulnerabilities: 345
Public exploits: 33
Known exploited (KEV): 10
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting RSA Authentication Manager RSA Authentication Manager is affected by 345 known vulnerabilities: 5 critical, 59 high, 154 medium, 127 low Critical High Medium Low

Vulnerabilities (345)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30322 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5339		 CWE-79 Low
No
No
 8.4 Patch 10 26.03.2020 SB2020010402
#VU30323 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5340		 CWE-79 Low
No
No
 8.4 Patch 10 26.03.2020 SB2020010402
#VU30457 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-3768		 CWE-611 Medium
No
No
 8.4 04.01.2020 SB2020010402
#VU22333 - Permissions, Privileges, and Access Controls
CVE-2019-3689		 CWE-264 Low
No
No
 8.4 Patch 9 29.10.2019 SB2019102913
SB2019110514
SB2022103135
and 2 more
#VU22329 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-10218		 CWE-22 Medium
No
No
 8.4 Patch 9 29.10.2019 SB2019102910
SB2019103005
SB2019110304
and 13 more
#VU20908 - Use After Free
CVE-2019-15239		 CWE-416 Low
No
No
 8.4 Patch 9 06.09.2019 SB2019112615
SB2019112616
SB2020010711
and 1 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 8.4 Patch 9 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more
#VU20814 - Double Free
CVE-2019-15212		 CWE-415 Low
No
No
 8.4 Patch 9 03.09.2019 SB2019082025
SB2020010631
#VU20813 - Use After Free
CVE-2019-15211		 CWE-416 Low
No
No
 8.4 Patch 9 03.09.2019 SB2019082024
SB2020010631
#VU17897 - Unprotected Storage of Credentials
CVE-2019-3711		 CWE-256 Low
No
No
 8.4 Patch 1 04.03.2019 SB2019030404
#VU14908 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-11075		 CWE-79 Low
No
No
 8.3 Patch 3 24.09.2018 SB2018092109
#VU14907 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-11074		 CWE-79 Low
No
No
 8.3 Patch 3 24.09.2018 SB2018092109
#VU14906 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-11073		 CWE-79 Low
No
No
 8.3 Patch 3 24.09.2018 SB2018092109
#VU13362 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1254		 CWE-79 Low
No
No
 8.3 Patch 1 15.06.2018 SB2018061510
#VU13361 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1253		 CWE-79 Low
No
No
 8.3 Patch 1 15.06.2018 SB2018061510
#VU12370 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2018-1248		 CWE-113 Low
No
No
 - 07.05.2018 SB2018050704
#VU12369 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-1247		 CWE-611 Low
Available
No
 - 07.05.2018 SB2018050704
#VU10165 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-15546		 CWE-89 Low
No
No
 - 24.01.2018 SB2018012401
#VU9394 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-14379		 CWE-79 Low
No
No
 - 21.11.2017 SB2017112204
#VU8979 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-14373		 CWE-79 Low
No
No
 - 27.10.2017 SB2017103004


Showing elements 321 - 340 out of 345