5.4

CVE-2019-18571

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a reflected cross-site scripting vulnerability in the My Access Live module [MAL]. An authenticated malicious local user could potentially exploit this vulnerability by sending crafted URL with scripts. When victim users access the module through their browsers, the malicious code gets injected and executed by the web browser in the context of the vulnerable web application.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Rsa Identity Governance And Lifecycle Version 7.1.0 Update -
Dell ≫ Rsa Identity Governance And Lifecycle Version 7.1.0 Update p01
Dell ≫ Rsa Identity Governance And Lifecycle Version 7.1.0 Update p02
Dell ≫ Rsa Identity Governance And Lifecycle Version 7.1.0 Update p03
Dell ≫ Rsa Identity Governance And Lifecycle Version 7.1.0 Update p04
Dell ≫ Rsa Identity Governance And Lifecycle Version 7.1.0 Update p05
Dell ≫ Rsa Identity Governance And Lifecycle Version 7.1.0 Update p06
Dell ≫ Rsa Identity Governance And Lifecycle Version 7.1.0 Update p07
Dell ≫ Rsa Identity Governance And Lifecycle Version 7.1.0 Update p08
Dell ≫ Rsa Identity Governance And Lifecycle Version 7.1.1 Update -
Dell ≫ Rsa Identity Governance And Lifecycle Version 7.1.1 Update p01
Dell ≫ Rsa Identity Governance And Lifecycle Version 7.1.1 Update p02
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.5% 0.39
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.4 2.3 2.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
NIST 3.5 6.8 2.9
AV:N/AC:M/Au:S/C:N/I:P/A:N
EMC 5.4 2.3 2.7
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://community.rsa.com/docs/DOC-109310