Known vulnerabilities in RSA Identity Management and Governance

Known vulnerabilities in RSA Identity Management and Governance

Vendor: RSA

Software: RSA Identity Management and Governance

Software CPE: cpe:2.3:a:rsa:rsa_identity_management_and_governance:*:*:*:*:*:*:*:*

Website: https://www.rsa.com/

Total vulnerabilities: 9

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (9)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU13609 - Uncontrolled Search Path Element CVE-2018-11049	CWE-427	Low	No	No	-	07.07.2018	SB2018070911
#VU7496 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2017-8005	CWE-79	Low	No	No	-	13.07.2017	SB2017071302
#VU7495 - Improper input validation CVE-2017-8004	CWE-20	Low	No	No	-	13.07.2017	SB2017071302
#VU7012 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2017-5004	CWE-79	Low	No	No	-	12.06.2017	SB2017061205 SB2017061206 SB2017061207
#VU7011 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2017-5003	CWE-79	Low	No	No	-	12.06.2017	SB2017061205 SB2017061206 SB2017061207
#VU662 - Improper Access Control CVE-2016-0918	CWE-284	Low	No	No	-	27.09.2016	SB2016092402
#VU40090 - Exposure of sensitive information to an unauthorized actor CVE-2016-0918	CWE-200	Low	No	No	-	24.09.2016	SB2015050101
#VU40800 - Permissions, Privileges, and Access Controls CVE-2015-0532	CWE-264	Medium	No	No	-	01.05.2015	SB2015050101
#VU41364 - Improper Authentication CVE-2014-4619	CWE-287	High	No	No	-	28.08.2014	SB2014082801