Critical severity9.8NVD Advisory· Published May 15, 2019· Updated Jun 17, 2026
CVE-2019-3725
CVE-2019-3725
Description
RSA Netwitness Platform versions prior to 11.2.1.1 and RSA Security Analytics versions prior to 10.6.6.1 are vulnerable to a Command Injection vulnerability due to missing input validation in the product. A remote unauthenticated malicious user could exploit this vulnerability to execute arbitrary commands on the server.
Affected products
4- Range: <10.6.6.1
- Range: <11.2.1.1
- RSA/RSA Netwitness Platformv5Range: unspecified
- RSA/RSA Security Analyticsv5Range: RSA Security Analytics
Patches
Vulnerability mechanics
References
2- community.rsa.com/docs/DOC-104202nvdVendor Advisory
- www.securityfocus.com/bid/108355nvd
News mentions
0No linked articles in our index yet.