CVE-2019-3761
Severity Score
5.4
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a stored cross-site scripting vulnerability in the Access Request module. A remote authenticated malicious user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the stored malicious code would gets executed by the web browser in the context of the vulnerable web application.
El software RSA Identity Governance and Lifecycle y los productos RSA Via Lifecycle and Governance versiones anteriores a 7.1.0 P08, contienen una vulnerabilidad de tipo cross-site scripting almacenado en el módulo Access Request. Un usuario malicioso autenticado remotamente podría explotar potencialmente esta vulnerabilidad para almacenar código HTML o JavaScript malicioso en un almacén de datos de aplicaciones confiable. Cuando usuarios víctimas acceden al almacén de datos mediante sus navegadores, el código malicioso almacenado sería ejecutado mediante la aplicación web vulnerable.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2019-01-03 CVE Reserved
- 2019-09-11 CVE Published
- 2023-03-08 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://community.rsa.com/docs/DOC-106943 | X_refsource_misc |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.0.1 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.0.1" | - |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.0.1 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.0.1" | p1 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.0.1 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.0.1" | p2_hotfix2 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.0.1 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.0.1" | p3 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.0.1 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.0.1" | p4 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.0.1 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.0.1" | p5 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.0.1 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.0.1" | p5_hotfix2 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.0.2 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.0.2" | - |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.0.2 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.0.2" | p1 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.0.2 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.0.2" | p10 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.0.2 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.0.2" | p11 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.0.2 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.0.2" | p12 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.0.2 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.0.2" | p13 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.0.2 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.0.2" | p14 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.0.2 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.0.2" | p2 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.0.2 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.0.2" | p3 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.0.2 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.0.2" | p4 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.0.2 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.0.2" | p5 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.0.2 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.0.2" | p6 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.0.2 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.0.2" | p7 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.0.2 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.0.2" | p8 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.0.2 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.0.2" | p9 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.1.0 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.1.0" | - |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.1.0 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.1.0" | p01 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.1.0 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.1.0" | p02 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.1.0 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.1.0" | p03 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.1.0 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.1.0" | p04 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.1.0 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.1.0" | p05 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.1.0 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.1.0" | p06 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.1.0 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.1.0" | p07 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.1.1 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.1.1" | - |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Identity Governance And Lifecycle Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" | 7.1.1 Search vendor "Dell" for product "Rsa Identity Governance And Lifecycle" and version "7.1.1" | p1 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Via Lifecycle And Governance Search vendor "Dell" for product "Rsa Via Lifecycle And Governance" | 7.0.0 Search vendor "Dell" for product "Rsa Via Lifecycle And Governance" and version "7.0.0" | - |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Via Lifecycle And Governance Search vendor "Dell" for product "Rsa Via Lifecycle And Governance" | 7.0.0 Search vendor "Dell" for product "Rsa Via Lifecycle And Governance" and version "7.0.0" | p1 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Via Lifecycle And Governance Search vendor "Dell" for product "Rsa Via Lifecycle And Governance" | 7.0.0 Search vendor "Dell" for product "Rsa Via Lifecycle And Governance" and version "7.0.0" | p2 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Via Lifecycle And Governance Search vendor "Dell" for product "Rsa Via Lifecycle And Governance" | 7.0.0 Search vendor "Dell" for product "Rsa Via Lifecycle And Governance" and version "7.0.0" | p3 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Via Lifecycle And Governance Search vendor "Dell" for product "Rsa Via Lifecycle And Governance" | 7.0.0 Search vendor "Dell" for product "Rsa Via Lifecycle And Governance" and version "7.0.0" | p4 |
Affected
| ||||||
| Dell Search vendor "Dell" | Rsa Via Lifecycle And Governance Search vendor "Dell" for product "Rsa Via Lifecycle And Governance" | 7.0.0 Search vendor "Dell" for product "Rsa Via Lifecycle And Governance" and version "7.0.0" | p5 |
Affected
| ||||||