Medium severity6.1NVD Advisory· Published Mar 30, 2018· Updated Jun 17, 2026

CVE-2018-1233

Description

RSA Authentication Agent version 8.0.1 and earlier for Web for both IIS and Apache Web Server are affected by a cross-site scripting vulnerability. The attackers could potentially exploit this vulnerability to execute arbitrary HTML or JavaScript code in the user's browser session in the context of the affected website.

Affected products

Rsa/Authentication Agent For Webllm-fuzzy
Range: <=8.0.1
EMC Corporation/RSA Authentication Agent for Web: Apache Web Servercpe-rescue
Range: version 8.0.1 and earlier

Patches

Vulnerability mechanics

References

seclists.org/fulldisclosure/2018/Mar/60nvdMailing ListThird Party Advisory
www.securitytracker.com/id/1040577nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000