5

CVE-2012-2280

EPSS 1.09%
Veröffentlicht 13.07.2012 21:55:02
Zuletzt bearbeitet 16.06.2026 23:41:16
Erkennungen
Login

EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 do not properly use frames, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "Cross frame scripting vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 4

NVD 12 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Emc ≫ Rsa Authentication Manager Update sp4 Version <= 7.1

Emc ≫ Rsa Authentication Manager Version 7.0

Emc ≫ Rsa Authentication Manager Version 7.1

Emc ≫ Rsa Authentication Manager Version 7.1 Update sp3

Rsa ≫ Authentication Manager Version 7.1 Update sp42

Rsa ≫ Securid Appliance Version 2.0

Rsa ≫ Securid Appliance Version 2.0.1

Rsa ≫ Securid Appliance Version 2.0.2

Rsa ≫ Securid Appliance Version 3.0

Rsa ≫ Securid Appliance Version 3.0 Update sp2

Rsa ≫ Securid Appliance Version 3.0 Update sp3

Rsa ≫ Securid Appliance Version 3.0 Update sp4

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.09%	0.609

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://archives.neohapsis.com/archives/bugtraq/2012-07/0064.html

https://nvd.nist.gov/vuln/detail/CVE-2012-2280

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-2280

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-2280

EUVD