VYPR
← All advisories
Medium severity4.8NVD Advisory· Published Dec 3, 2019· Updated Jun 17, 2026

CVE-2019-18574

CVE-2019-18574

Description

RSA Authentication Manager software versions prior to 8.4 P8 contain a stored cross-site scripting vulnerability in the Security Console. A malicious Security Console administrator could exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface which could then be included in a report. When other Security Console administrators open the affected report, the injected scripts could potentially be executed in their browser.

Affected products

11
  • EMC Corporation/Rsa Authentication Manager8 versions
    cpe:2.3:a:emc:rsa_authentication_manager:8.4:-:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:emc:rsa_authentication_manager:8.4:-:*:*:*:*:*:*
    • cpe:2.3:a:emc:rsa_authentication_manager:8.4:p1:*:*:*:*:*:*
    • cpe:2.3:a:emc:rsa_authentication_manager:8.4:p2:*:*:*:*:*:*
    • cpe:2.3:a:emc:rsa_authentication_manager:8.4:p3:*:*:*:*:*:*
    • cpe:2.3:a:emc:rsa_authentication_manager:8.4:p4:*:*:*:*:*:*
    • cpe:2.3:a:emc:rsa_authentication_manager:8.4:p5:*:*:*:*:*:*
    • cpe:2.3:a:emc:rsa_authentication_manager:8.4:p6:*:*:*:*:*:*
    • cpe:2.3:a:emc:rsa_authentication_manager:8.4:p7:*:*:*:*:*:*
  • Rsa/Authentication Manager2 versions
    cpe:2.3:a:rsa:authentication_manager:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:rsa:authentication_manager:*:*:*:*:*:*:*:*range: <8.4
    • (no CPE)range: <8.4 P8
  • Dell/RSA Authentication Managerv5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.