CVE-2018-1255 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Description

RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to a vulnerable web application, which is then reflected back to the victim and executed by the web browser.

Reserved 2017-12-06 | Published 2018-07-13 | Updated 2024-09-17 | Assigner dell

MEDIUM: 6.1CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Problem types

Reflected Cross-Site Scripting Vulnerability

Product status

version 7.0.1, all patch levels

affected

version 7.0.2, all patch levels

affected

version 7.1.0, all patch levels

affected

References

www.securitytracker.com/id/1041287 (1041287) vdb-entry

seclists.org/fulldisclosure/2018/Jul/46 (20180711 DSA-2018-084: RSA Identity Governance and Lifecycle Multiple Vulnerabilities) mailing-list

cve.org (CVE-2018-1255)

nvd.nist.gov (CVE-2018-1255)

Download JSON

https://cve.threatint.com/CVE/CVE-2018-1255

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.