Emc Rsa Netwitness Informer vulnerabilities

2 CVEs affecting Emc Rsa Netwitness Informer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-4609, published 2012-12-05.

More from Emc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-4609, published 2012-12-05. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. The web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
• CVE-2012-4608, published 2012-12-05. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in the web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to hijack the authentication of arbitrary users.