Rsa Securid Web Agent vulnerabilities

3 CVEs affecting Rsa Securid Web Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-6851, published 2015-12-23.

More from Rsa.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2005-1471, published 2005-05-06. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. Heap-based buffer overflow in RSA SecurID Web Agent 5, 5.2, and 5.3 allows remote attackers to execute arbitrary code via crafted chunked-encoding data.
• CVE-2013-0941, published 2013-05-22. Low severity, CVSS 2.1. EPSS: 1.3% chance of exploitation in the next 30 days. EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before 6.1.4 for Microsoft…
• CVE-2015-6851, published 2015-12-23. Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days. EMC RSA SecurID Web Agent before 8.0 allows physically proximate attackers to bypass the privacy-screen protection mechanism by leveraging an unattended workstation and running DOM Inspector.