Known vulnerabilities in RSA Via Lifecycle and Governance

Known vulnerabilities in RSA Via Lifecycle and Governance

Vendor: RSA

Software: RSA Via Lifecycle and Governance

Software CPE: cpe:2.3:a:rsa:rsa_via_lifecycle_and_governance:*:*:*:*:*:*:*:*

Website: https://www.rsa.com/

Total vulnerabilities: 9

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Vulnerabilities (9)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU35498 - Improper Control of Generation of Code ('Code Injection') CVE-2019-3759	CWE-94	High	Available	No	-	11.09.2019	SB2019091158
#VU35499 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2019-3760	CWE-89	High	No	No	-	11.09.2019	SB2019091158
#VU35500 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-3761	CWE-79	Low	No	No	-	11.09.2019	SB2019091158
#VU35501 - Exposure of sensitive information to an unauthorized actor CVE-2019-3763	CWE-200	Low	No	No	-	11.09.2019	SB2019091158
#VU13609 - Uncontrolled Search Path Element CVE-2018-11049	CWE-427	Low	No	No	-	07.07.2018	SB2018070911
#VU7496 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2017-8005	CWE-79	Low	No	No	-	13.07.2017	SB2017071302
#VU7495 - Improper input validation CVE-2017-8004	CWE-20	Low	No	No	-	13.07.2017	SB2017071302
#VU7012 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2017-5004	CWE-79	Low	No	No	-	12.06.2017	SB2017061205 SB2017061206 SB2017061207
#VU7011 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2017-5003	CWE-79	Low	No	No	-	12.06.2017	SB2017061205 SB2017061206 SB2017061207