CVE-2012-2278
Severity Score
6.1
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Multiple cross-site scripting (XSS) vulnerabilities in the (1) Self-Service Console and (2) Security Console in EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en (1) Self-Service Console y (2) Security Console en EMC RSA Authentication Manager v7.1 anterior a SP4 P14 y RSA SecurID Appliance v3.0 anterior a SP4 P14, permite a atacantes remotos inyectar código arbitrario o HTML mediante vectores deconocidos.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-04-19 CVE Reserved
- 2012-07-13 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2012-07/0064.html | Mailing List |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Emc Search vendor "Emc" | Rsa Authentication Manager Search vendor "Emc" for product "Rsa Authentication Manager" | <= 7.1 Search vendor "Emc" for product "Rsa Authentication Manager" and version " <= 7.1" | sp4 |
Affected
| ||||||
| Emc Search vendor "Emc" | Rsa Authentication Manager Search vendor "Emc" for product "Rsa Authentication Manager" | 7.0 Search vendor "Emc" for product "Rsa Authentication Manager" and version "7.0" | - |
Affected
| ||||||
| Emc Search vendor "Emc" | Rsa Authentication Manager Search vendor "Emc" for product "Rsa Authentication Manager" | 7.1 Search vendor "Emc" for product "Rsa Authentication Manager" and version "7.1" | - |
Affected
| ||||||
| Emc Search vendor "Emc" | Rsa Authentication Manager Search vendor "Emc" for product "Rsa Authentication Manager" | 7.1 Search vendor "Emc" for product "Rsa Authentication Manager" and version "7.1" | sp3 |
Affected
| ||||||
| Rsa Search vendor "Rsa" | Authentication Manager Search vendor "Rsa" for product "Authentication Manager" | 7.1 Search vendor "Rsa" for product "Authentication Manager" and version "7.1" | sp42 |
Affected
| ||||||
| Rsa Search vendor "Rsa" | Securid Appliance Search vendor "Rsa" for product "Securid Appliance" | 2.0 Search vendor "Rsa" for product "Securid Appliance" and version "2.0" | - |
Affected
| ||||||
| Rsa Search vendor "Rsa" | Securid Appliance Search vendor "Rsa" for product "Securid Appliance" | 2.0.1 Search vendor "Rsa" for product "Securid Appliance" and version "2.0.1" | - |
Affected
| ||||||
| Rsa Search vendor "Rsa" | Securid Appliance Search vendor "Rsa" for product "Securid Appliance" | 2.0.2 Search vendor "Rsa" for product "Securid Appliance" and version "2.0.2" | - |
Affected
| ||||||
| Rsa Search vendor "Rsa" | Securid Appliance Search vendor "Rsa" for product "Securid Appliance" | 3.0 Search vendor "Rsa" for product "Securid Appliance" and version "3.0" | - |
Affected
| ||||||
| Rsa Search vendor "Rsa" | Securid Appliance Search vendor "Rsa" for product "Securid Appliance" | 3.0 Search vendor "Rsa" for product "Securid Appliance" and version "3.0" | sp2 |
Affected
| ||||||
| Rsa Search vendor "Rsa" | Securid Appliance Search vendor "Rsa" for product "Securid Appliance" | 3.0 Search vendor "Rsa" for product "Securid Appliance" and version "3.0" | sp3 |
Affected
| ||||||
| Rsa Search vendor "Rsa" | Securid Appliance Search vendor "Rsa" for product "Securid Appliance" | 3.0 Search vendor "Rsa" for product "Securid Appliance" and version "3.0" | sp4 |
Affected
| ||||||