Emc Rsa Security Sitekey vulnerabilities

3 CVEs affecting Emc Rsa Security Sitekey, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-7201, published 2007-04-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-7199, published 2007-04-30. High severity, CVSS 8.5. EPSS: 2.3% chance of exploitation in the next 30 days. EMC RSA Security SiteKey allows remote attackers to display the correct image via a man-in-the-middle (MITM) attack in which an attacker-controlled server proxies authentication data to and from a…
CVE-2006-7201, published 2007-04-30. High severity, CVSS 9.3. EPSS: 2.3% chance of exploitation in the next 30 days. EMC RSA Security SiteKey does not set the secure qualifier on the SiteKey Flash token (aka the PassMark Flash shared object), which might allow remote attackers to obtain the token via HTTP.
CVE-2006-7200, published 2007-04-30. High severity, CVSS 9.0. EPSS: 1.5% chance of exploitation in the next 30 days. EMC RSA Security SiteKey issues challenge-bypass tokens that persist forever without a cancellation interface for end users, which makes it easier for attackers to bypass one stage of authentication…