Medium severity6.5NVD Advisory· Published Sep 28, 2018· Updated Jun 17, 2026
CVE-2018-11073
CVE-2018-11073
Description
RSA Authentication Manager versions prior to 8.3 P3 contain a stored cross-site scripting vulnerability in the Operations Console. A malicious Operations Console administrator could exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface. When other Operations Console administrators open the affected page, the injected scripts could potentially be executed in their browser.
Affected products
2<8.3 P3+ 1 more
- (no CPE)range: <8.3 P3
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/105410nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1041697nvdThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2018/Sep/39nvdMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.