Emc Rsa Authentication Agent vulnerabilities

4 CVEs affecting Emc Rsa Authentication Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-3280, published 2013-10-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-2287, published 2012-09-25. High severity, CVSS 8.5. EPSS: 2.7% chance of exploitation in the next 30 days. The authentication functionality in EMC RSA Authentication Agent 7.1 and RSA Authentication Client 3.5 on Windows XP and Windows Server 2003, when an unspecified configuration exists, allows remote…
CVE-2013-0942, published 2013-05-22. Medium severity, CVSS 4.3. EPSS: 2.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Agent 7.1 before 7.1.1 for Web for Internet Information Services, and 7.1 before 7.1.1 for Web for Apache, allows remote attackers…
CVE-2013-3280, published 2013-10-25. High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days. EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design, which allows remote attackers to bypass intended access restrictions via vectors that…
CVE-2013-3271, published 2013-08-28. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. EMC RSA Authentication Agent for PAM 7.0 before 7.0.2.1 enforces the maximum number of login attempts within the PAM-enabled application codebase, instead of within the Agent codebase, which makes it…