CVE-2014-0638: Emc Rsa Adaptive Authentication On-Premise

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a "cross-frame scripting" issue.

Affected products

• Emc Rsa Adaptive Authentication On-Premise: version 6.0 only; version 6.0.2.1 only; version 7.0 only; version 7.1 only

Published 2014-04-04. Last modified 2026-06-17.