Emc Rsa Identity Governance And Lifecycle vulnerabilities

8 CVEs affecting Emc Rsa Identity Governance And Lifecycle, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1255, published 2018-07-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-1245, published 2018-07-13. High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days. RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains an authorization bypass vulnerability within the workflow architect component (ACM). A remote authenticated malicious…
CVE-2017-8004, published 2017-07-17. High severity, CVSS 7.2. EPSS: 2.2% chance of exploitation in the next 30 days. The EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance and RSA IMG products (RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels; RSA Via Lifecycle…
CVE-2018-1255, published 2018-07-13. Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days. RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this…
CVE-2017-8005, published 2017-07-17. Medium severity, CVSS 5.4. EPSS: 1.2% chance of exploitation in the next 30 days. The EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG products (RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels; RSA Via Lifecycle…
CVE-2017-5003, published 2017-06-09. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2 (all patch levels); RSA Via Lifecycle and Governance version 7.0 (all patch levels); and RSA Identity Management and Governance (IMG)…
CVE-2017-5004, published 2017-06-09. Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days. EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2 (all patch levels); RSA Via Lifecycle and Governance version 7.0 (all patch levels); and RSA Identity Management and Governance (IMG)…
CVE-2018-11049, published 2018-07-11. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG releases have an uncontrolled search vulnerability. The installation scripts set an environment variable in an…
CVE-2018-1182, published 2018-03-08. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels (hardware appliance and software bundle deployments only); RSA Via Lifecycle and…