Known vulnerabilities in RSA Identity Governance and Lifecycle - page 6

Vendor: RSA
Software: RSA Identity Governance and Lifecycle
Software CPE: cpe:2.3:a:rsa:rsa_identity_governance_and_lifecycle:*:*:*:*:*:*:*:*
Website: https://www.rsa.com/
Total vulnerabilities: 113
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting RSA Identity Governance and Lifecycle RSA Identity Governance and Lifecycle is affected by 113 known vulnerabilities: 8 high, 67 medium, 38 low Critical High Medium Low

Vulnerabilities (113)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU34955 - Session Fixation
CVE-2019-18573		 CWE-384 High
No
No
 - 18.12.2019 SB2019121847
#VU35498 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-3759		 CWE-94 High
Available
No
 - 11.09.2019 SB2019091158
#VU35499 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-3760		 CWE-89 High
No
No
 - 11.09.2019 SB2019091158
#VU35500 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-3761		 CWE-79 Low
No
No
 - 11.09.2019 SB2019091158
#VU35501 - Exposure of sensitive information to an unauthorized actor
CVE-2019-3763		 CWE-200 Low
No
No
 - 11.09.2019 SB2019091158
#VU13865 - Command injection
CVE-2018-1245		 CWE-77 Low
No
No
 7.0.2 P07, 7.1.0 P01 13.07.2018 SB2018071311
#VU13864 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1255		 CWE-79 Low
No
No
 7.0.2 P07, 7.1.0 P01 12.07.2018 SB2018071311
#VU13609 - Uncontrolled Search Path Element
CVE-2018-11049		 CWE-427 Low
No
No
 - 07.07.2018 SB2018070911
#VU10882 - Permissions, Privileges, and Access Controls
CVE-2018-1182		 CWE-264 Low
No
No
 - 07.03.2018 SB2018030708
#VU7496 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8005		 CWE-79 Low
No
No
 - 13.07.2017 SB2017071302
#VU7495 - Improper input validation
CVE-2017-8004		 CWE-20 Low
No
No
 - 13.07.2017 SB2017071302
#VU7012 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-5004		 CWE-79 Low
No
No
 - 12.06.2017 SB2017061205
SB2017061206
SB2017061207
#VU7011 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-5003		 CWE-79 Low
No
No
 - 12.06.2017 SB2017061205
SB2017061206
SB2017061207


Showing elements 101 - 120 out of 113