CVE-2007-4900: Rsa Envision

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the logon page in RSA EnVision 3.3.6 Build 0115 allows remote attackers to inject arbitrary web script or HTML via the username field.

Affected products

• Rsa Envision: version 3.3.6_build_0115 only

Published 2007-09-14. Last modified 2026-06-16.