Emc Rsa Adaptive Authentication On-Premise vulnerabilities

10 CVEs affecting Emc Rsa Adaptive Authentication On-Premise, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-0925, published 2016-09-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-4631, published 2014-12-08. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. RSA Adaptive Authentication (On-Premise) 6.0.2.1 through 7.1 P3, when using device binding in a Challenge SOAP call or using the RSA Adaptive Authentication Integration Adapters with Out-of-Band…
CVE-2012-4611, published 2012-11-27. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Adaptive Authentication On-Premise (AAOP) before 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified…
CVE-2011-2733, published 2011-08-18. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not prevent reuse of authentication information during a session, which allows…
CVE-2011-1422, published 2011-04-22. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise (AAOP) 2.x, 5.7.x, and 6.x allows remote attackers to inject arbitrary…
CVE-2011-2742, published 2011-12-14. Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days. EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly perform forensic evaluation upon receipt of device tokens from mobile…
CVE-2011-2741, published 2011-12-14. Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days. EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly implement Device Recovery and Device Identification, which might allow…
CVE-2016-0925, published 2016-09-21. Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Case Management application in EMC RSA Adaptive Authentication (On-Premise) before 6.0.2.1.SP3.P4 HF210, 7.0.x and 7.1.x before 7.1.0.0.SP0.P6 HF50,…
CVE-2014-0638, published 2014-04-04. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving…
CVE-2014-0637, published 2014-04-04. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the back-office case-management application in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote authenticated users to…
CVE-2012-2286, published 2012-10-10. Low severity, CVSS 2.9. EPSS: 0.6% chance of exploitation in the next 30 days. Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 before SP3 P3 allows remote attackers to obtain sensitive information via unknown vectors.