CVE-2018-1247: Rsa Authentication Manager

High severity, CVSS 7.1. EPSS: 16% chance of exploitation in the next 30 days.

RSA Authentication Manager Security Console, version 8.3 and earlier, contains a XML External Entity (XXE) vulnerability. This could potentially allow admin users to cause a denial of service or extract server data via injecting a maliciously crafted DTD in an XML file submitted to the application.

Affected products

• Rsa Authentication Manager: up to and including 8.3

Published 2018-05-08. Last modified 2026-06-17.