CVE-2018-1254: emc rsa_authentication_manager Cross-site Scripting
Vulnerability summary
CVE-2018-1254 is a medium (CVSS 6.1) Cross-site Scripting vulnerability in emc rsa_authentication_manager. EPSS estimates a 2.03% chance of exploitation in the next 30 days, higher than 80.6% of scored vulnerabilities.
Timeline
- 21-06-2018PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
RSA Authentication Manager Security Console, versions 8.3 P1 and earlier, contains a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim Security Console administrator to supply malicious HTML or JavaScript code to a vulnerable web application, which is then reflected back to the victim and executed by the web browser.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
2.03%
Chance of exploitation in the next 30 days
Percentile
81%
Versus all other CVEs
30-day change
0.00 pp
From 2.03% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Emc1 product
Rsa1 product
- rsa authentication manager≥ unspecified, ≤ 8.3 P1
2 vendors · 2 products