Known vulnerabilities in SecurID Authentication Manager 8.6 Patch 2

Vendor: RSA
Version: 8.6 Patch 2
Software CPE: cpe:2.3:a:rsa:securid_authentication_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 46
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SecurID Authentication Manager version 8.6 Patch 2 SecurID Authentication Manager 8.6 Patch 2 is affected by 46 vulnerabilities: 17 high, 21 medium, 8 low Critical High Medium Low

Vulnerabilities (46)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65491 - Improper input validation
CVE-2022-21560
CWE-20 Medium
No
No
8.6 Patch 4, 8.7 Patch 1 20.07.2022 SB2022072038
SB2022100348
SB2022081555
#VU65492 - Improper input validation
CVE-2022-21564
CWE-20 Medium
No
No
8.6 Patch 4, 8.7 Patch 1 20.07.2022 SB2022072038
SB2022100348
SB2022081555
#VU65488 - Improper input validation
CVE-2022-21548
CWE-20 Medium
No
No
8.6 Patch 4, 8.7 Patch 1 20.07.2022 SB2022072038
SB2022100348
SB2022081555
#VU65490 - Improper input validation
CVE-2022-21557
CWE-20 Low
No
No
8.6 Patch 4, 8.7 Patch 1 20.07.2022 SB2022072038
SB2022100348
SB2022081555
#VU64079 - Missing release of memory after effective lifetime
CVE-2022-1012
CWE-401 Medium
No
No
8.7 Patch 1 08.06.2022 SB2022060827
SB2022061417
SB2022062437
and 75 more
#VU64063 - Out-of-bounds write
CVE-2022-28734
CWE-787 Medium
No
No
8.6 Patch 4, 8.7 Patch 1 08.06.2022 SB2022060810
SB2022061540
SB2022061566
and 36 more
#VU64062 - Integer underflow
CVE-2022-28733
CWE-191 High
No
No
8.6 Patch 4, 8.7 Patch 1 08.06.2022 SB2022060810
SB2022061540
SB2022061566
and 38 more
#VU63945 - Out-of-bounds read
CVE-2022-1586
CWE-125 Medium
No
No
8.6 Patch 4, 8.7 Patch 1 02.06.2022 SB2022060210
SB2022071156
SB2022071217
and 71 more
#VU63419 - Missing release of memory after effective lifetime
CVE-2022-28748
CWE-401 Low
No
No
8.7 Patch 1 19.05.2022 SB2022061728
SB2022072819
SB2022101814
and 28 more
#VU63164 - Double Free
CVE-2022-28390
CWE-415 Low
No
No
8.6 Patch 4 13.05.2022 SB2022051312
SB2022051712
SB2022051833
and 61 more
#VU63160 - Double Free
CVE-2022-28388
CWE-415 Low
No
No
8.6 Patch 4 13.05.2022 SB2022051312
SB2022051712
SB2022060826
and 52 more
#VU63009 - Incorrect Implementation of Authentication Algorithm
CVE-2022-27782
CWE-303 Medium
No
No
8.6 Patch 4, 8.7 Patch 1 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 68 more
#VU62802 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-20771
CWE-835 Medium
No
No
8.7 Patch 1 04.05.2022 SB2022050437
SB2022051732
SB2022051836
and 14 more
#VU62800 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-20770
CWE-835 Medium
No
No
8.7 Patch 1 04.05.2022 SB2022050437
SB2022051732
SB2022051836
and 14 more
#VU62798 - Missing release of memory after effective lifetime
CVE-2022-20785
CWE-401 Medium
No
No
8.7 Patch 1 04.05.2022 SB2022050437
SB2022051732
SB2022051836
and 13 more
#VU62741 - Integer overflow
CVE-2022-29824
CWE-190 High
No
No
8.6 Patch 4, 8.7 Patch 1 03.05.2022 SB2022050305
SB2022050306
SB2022050307
and 73 more
#VU62492 - Origin Validation Error
CVE-2021-26291
CWE-346 High
No
No
8.6 Patch 4, 8.7 Patch 1 22.04.2022 SB2021042333
SB2022042228
SB2022072038
and 15 more
#VU61799 - Out-of-bounds write
CVE-2020-36518
CWE-787 Medium
No
No
8.6 Patch 4, 8.7 Patch 1 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU58198 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40690
CWE-200 Medium
No
No
8.6 Patch 4, 8.7 Patch 1 16.11.2021 SB2021111622
SB2021111712
SB2022012032
and 37 more
#VU9542 - Resource exhaustion
CVE-2017-16932
CWE-400 Low
No
No
8.6 Patch 4, 8.7 Patch 1 05.12.2017 SB2017120502
SB2017072505
SB2018071411
and 7 more


Showing elements 1 - 20 out of 46