VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 30, 2008· Updated Jun 16, 2026

CVE-2008-2026

CVE-2008-2026

Description

Cross-site scripting (XSS) vulnerability in WebID/IISWebAgentIF.dll in RSA Authentication Agent 5.3.0.258, and other versions before 5.3.3.378, allows remote attackers to inject arbitrary web script or HTML via a URL-encoded postdata parameter. NOTE: this is different than CVE-2005-1118, but it might be the same as CVE-2008-1470.

Affected products

2
  • Rsa/Authentication Agent For Web2 versions
    cpe:2.3:a:rsa:authentication_agent:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:rsa:authentication_agent:*:*:*:*:*:*:*:*range: <=5.3
    • (no CPE)range: <5.3.3.378

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.