Emc

Rsa Adaptive Authentication On-premise

10 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2016-0925

  • EPSS 0.17%
  • Veröffentlicht 21.09.2016 02:59:08
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the Case Management application in EMC RSA Adaptive Authentication (On-Premise) before 6.0.2.1.SP3.P4 HF210, 7.0.x and 7.1.x before 7.1.0.0.SP0.P6 HF50, and 7.2.x before 7.2.0.0.SP0.P0 HF20 allows remote au...

5

CVE-2014-4631

  • EPSS 1%
  • Veröffentlicht 08.12.2014 11:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

RSA Adaptive Authentication (On-Premise) 6.0.2.1 through 7.1 P3, when using device binding in a Challenge SOAP call or using the RSA Adaptive Authentication Integration Adapters with Out-of-Band Phone (Authentify) functionality, conducts permanent de...

4.3

CVE-2014-0638

  • EPSS 0.2%
  • Veröffentlicht 04.04.2014 15:09:38
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a "cross-frame scriptin...

4.3

CVE-2014-0637

  • EPSS 0.2%
  • Veröffentlicht 04.04.2014 15:09:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the back-office case-management application in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified...

4.3

CVE-2012-4611

  • EPSS 0.41%
  • Veröffentlicht 27.11.2012 21:55:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Adaptive Authentication On-Premise (AAOP) before 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

2.9

CVE-2012-2286

  • EPSS 0.13%
  • Veröffentlicht 10.10.2012 21:55:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 before SP3 P3 allows remote attackers to obtain sensitive information via unknown vectors.

6.8

CVE-2011-2741

  • EPSS 0.22%
  • Veröffentlicht 14.12.2011 11:55:06
  • Zuletzt bearbeitet 11.04.2025 00:51:21

EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly implement Device Recovery and Device Identification, which might allow remote attackers to bypass intended security restri...

6.8

CVE-2011-2742

  • EPSS 0.22%
  • Veröffentlicht 14.12.2011 11:55:06
  • Zuletzt bearbeitet 11.04.2025 00:51:21

EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly perform forensic evaluation upon receipt of device tokens from mobile apps, which might allow remote attackers to bypass i...

7.5

CVE-2011-2733

  • EPSS 0.18%
  • Veröffentlicht 18.08.2011 23:55:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not prevent reuse of authentication information during a session, which allows remote authenticated users to bypass intended access res...

4.3

CVE-2011-1422

  • EPSS 0.45%
  • Veröffentlicht 22.04.2011 10:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise (AAOP) 2.x, 5.7.x, and 6.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors.