CVE-2018-11075: emc rsa_authentication_manager Cross-site Scripting
Vulnerability summary
CVE-2018-11075 is a medium (CVSS 5.8) Cross-site Scripting vulnerability in emc rsa_authentication_manager. EPSS estimates a 1.49% chance of exploitation in the next 30 days, higher than 73.7% of scored vulnerabilities.
Timeline
- 28-09-2018PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
RSA Authentication Manager versions prior to 8.3 P3 contain a reflected cross-site scripting vulnerability in a Security Console page. A remote, unauthenticated malicious user, with the knowledge of a target user's anti-CSRF token, could potentially exploit this vulnerability by tricking a victim Security Console user to supply malicious HTML or JavaScript code to the vulnerable web application, which code is then executed by the victim's web browser in the context of the vulnerable web application.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST4.7MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:NDiffers
EPSS trend
Probability
1.49%
Chance of exploitation in the next 30 days
Percentile
74%
Versus all other CVEs
30-day change
0.00 pp
From 1.49% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Emc1 product
- rsa_authentication_manager8.3:p1 | 8.3:p2
Rsa1 product
- authentication_manager≥ unspecified, < 8.3 P3 | ≤ 8.3
2 vendors · 2 products