Medium severity6.1NVD Advisory· Published Jun 21, 2018· Updated Jun 17, 2026
CVE-2018-1253
CVE-2018-1253
Description
RSA Authentication Manager Operation Console, versions 8.3 P1 and earlier, contains a stored cross-site scripting vulnerability. A malicious Operations Console administrator could potentially exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface. When other Operations Console administrators open the affected page, the injected scripts could potentially be executed in their browser.
Affected products
2<=8.3 P1+ 1 more
- (no CPE)range: <=8.3 P1
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
3- seclists.org/fulldisclosure/2018/Jun/39nvdMailing ListThird Party Advisory
- www.securityfocus.com/bid/104534nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1041134nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.