High severity7.1NVD Advisory· Published May 8, 2018· Updated Jun 17, 2026

CVE-2018-1247

Description

RSA Authentication Manager Security Console, version 8.3 and earlier, contains a XML External Entity (XXE) vulnerability. This could potentially allow admin users to cause a denial of service or extract server data via injecting a maliciously crafted DTD in an XML file submitted to the application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Rsa/Authentication Managerllm-fuzzy
Range: <=8.3
EMC Corporation/Rsa Authentication Managercpe-rescue
Range: version 8.3 and earlier

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/44634/nvdExploitThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2018/May/18nvdMailing ListThird Party Advisory
www.securityfocus.com/bid/104107nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1040835nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.014
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000