CVE-2018-1253
Stored cross-site scripting vulnerability
- State
- Published
- Severity
- 6.5 Medium
- Published
- Jun 21, 2018
- Updated
- Sep 17, 2024
- Reserved
- Dec 6, 2017
Description
RSA Authentication Manager Operation Console, versions 8.3 P1 and earlier, contains a stored cross-site scripting vulnerability. A malicious Operations Console administrator could potentially exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface. When other Operations Console administrators open the affected page, the injected scripts could potentially be executed in their browser.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 6.5 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L | dell |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Authentication ManagerRSA |
|
References
- 104534vdb-entry
- 1041134vdb-entry
- 20180612 DSA-2018-107: RSA Authentication Manager Cross-site scripting Vulnerabilitiesmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.