Multiple cross-site scripting (XSS) vulnerabilities in the (1) Self-Service Console and (2) Security Console in EMC RSA Authentication Manag

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• emc rsa authentication managerup to 7.1 inclusive
• emc rsa authentication manager7.0
• emc rsa authentication manager7.1
• rsa authentication manager7.1
• rsa securid appliance2.0
• rsa securid appliance2.0.1
• rsa securid appliance2.0.2
• rsa securid appliance3.0

Other highest-scoring records for the same primary product.

• CVE-2019-3768RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability.
  26Monitor
• CVE-2018-1254RSA Authentication Manager Security Console, versions 8.3 P1 and earlier, contains a reflected cross-site scripting vulnerability.
  25Monitor
• CVE-2012-2279Open redirect vulnerability in the Security Console in EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 befor
  25Monitor
• CVE-2018-1253Stored cross-site scripting vulnerability
  24Monitor
• CVE-2017-14373EMC RSA Authentication Manager 8.2 SP1 P4 and earlier contains a reflected cross-site scripting vulnerability that could potentially be expl
  24Monitor
• CVE-2017-8006In EMC RSA Authentication Manager 8.2 SP1 Patch 1 and earlier, a malicious user logged into the Self-Service Console of RSA Authentication M
  24Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

User content is inserted into the page as HTML. The browser interprets the content as code rather than data.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1commentEl.innerHTML = comment.body;

1commentEl.textContent = comment.body;

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.