CVSS: 4.3EPSS: 0%CPEs: 6EXPL: 0CVE-2013-3288
https://notcve.org/view.php?id=CVE-2013-3288
Cross-site scripting (XSS) vulnerability on the EMC RSA Data Protection Manager (DPM) appliance 3.2.x before 3.2.4.2 and 3.5.x before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Vulnerabilidad de cross-site scripting (XSS) en el software Data Protection Manager (DPM) de EMC RSA, versiones 3.2.x anteriores a 3.2.4.2 y 3.5.x anteriores a 3.5.1 permite a atacantes remotos inyectar scripts web o HTML arbitrarios a través de una URL manipulada. • http://archives.neohapsis.com/archives/bugtraq/2013-11/0120.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.9EPSS: 0%CPEs: 4EXPL: 0CVE-2012-4613
https://notcve.org/view.php?id=CVE-2012-4613
EMC RSA Data Protection Manager Appliance 2.7.x and 3.x before 3.2.1 does not properly restrict the number of authentication attempts by a user account, which makes it easier for local users to bypass intended access restrictions via a brute-force attack. EMC RSA Data Protection Manager Appliance v3.x y v2.7.x antes de v3.2.1 no restringe correctamente el número de intentos de autenticación de una cuenta de usuario, lo que hace que sea más fácil para los usuarios locales eludir restricciones de acceso por medio de un ataque de fuerza bruta. • http://archives.neohapsis.com/archives/bugtraq/2012-11/0050.html http://www.securityfocus.com/bid/56508 • CWE-287: Improper Authentication •
CVSS: 4.3EPSS: 0%CPEs: 8EXPL: 0CVE-2012-4612
https://notcve.org/view.php?id=CVE-2012-4612
Cross-site scripting (XSS) vulnerability in EMC RSA Data Protection Manager Appliance and Software Server 2.7.x and 3.x before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en EMC RSA Appliance Data Protection Manager Software Server v3.x y v2.7.x antes de v3.2.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados. • http://archives.neohapsis.com/archives/bugtraq/2012-11/0050.html http://www.securityfocus.com/bid/56506 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •