Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-4976 State: PUBLISHED Published: 2017-07-09T20:00:00 Last Updated: 2024-08-05T14:47:43.790Z Vendors: n/a Products: EMC ESRS Policy Manager prior to 6.8 Problem Types: undocumented account vulnerability Description: EMC ESRS Policy Manager prior to 6.8 contains an undocumented account (OpenDS admin) with a default password. A remote attacker with the knowledge of the default password may login to the system and gain administrator privileges to the local LDAP directory server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038840 - http://seclists.org/fulldisclosure/2017/Jul/13
CVE ID: CVE-2017-4977 State: PUBLISHED Published: 2017-03-29T21:00:00 Last Updated: 2024-08-05T14:47:43.816Z Vendors: n/a Products: RSA Archer Security Operations Management with RSA Unified Collector Framework versions prior to 1.3.1.52 Problem Types: Sensitive Information Disclosure Vulnerability Description: EMC RSA Archer Security Operations Management with RSA Unified Collector Framework versions prior to 1.3.1.52 contain a sensitive information disclosure vulnerability that could potentially be exploited by malicious users to compromise an affected system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97225 - http://www.securityfocus.
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97225 - http://www.securityfocus.com/archive/1/540339/30/0/threaded - http://www.securitytracker.com/id/1038162
CVE ID: CVE-2017-4978 State: PUBLISHED Published: 2017-05-19T15:00:00 Last Updated: 2024-08-05T14:47:43.660Z Vendors: n/a Products: EMC RSA Adaptive Authentication (On-Premise) RSA Adaptive Authentication (On-Premise) versions prior to 7.3 P2 (exclusive) Problem Types: Cross-Site Scripting Vulnerability Description: EMC RSA Adaptive Authentication (On-Premise) versions prior to 7.3 P2 (exclusive) contains a fix for a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038469 - http://www.securityfocus.com/archive/1/540552
ogram Container: References: - http://www.securitytracker.com/id/1038469 - http://www.securityfocus.com/archive/1/540552/30/0/threaded - http://www.securityfocus.com/bid/98392
CVE ID: CVE-2017-4979 State: PUBLISHED Published: 2017-05-19T15:00:00 Last Updated: 2024-08-05T14:47:44.041Z Vendors: n/a Products: EMC Isilon OneFS OneFS 8.0.1.0, OneFS 8.0.0.0 8.0.0.2, OneFS 7.2.1.0 - 7.2.1.3, OneFS 7.2.0.x Problem Types: NFS Export Upgrade Vulnerability Description: EMC Isilon OneFS 8.0.1.0, OneFS 8.0.0.0 - 8.0.0.2, OneFS 7.2.1.0 - 7.2.1.3, and OneFS 7.2.0.x is affected by an NFS export vulnerability. Under certain conditions, after upgrading a cluster from OneFS 7.1.1.x or earlier, users may have unexpected levels of access to some NFS exports. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/540551/30/0/threaded
CVE ID: CVE-2017-4980 State: PUBLISHED Published: 2017-03-29T21:00:00 Last Updated: 2024-08-05T14:47:43.817Z Vendors: n/a Products: EMC Isilon OneFS EMC Isilon OneFS 8.0.0 8.0.0.1, EMC Isilon OneFS 7.2.0 - 7.2.1.3, EMC Isilon OneFS 7.1.0 - 7.1.1.10 Problem Types: Path Traversal Vulnerability Description: EMC Isilon OneFS is affected by a path traversal vulnerability that may potentially be exploited by attackers to compromise the affected system. Affected versions are 7.1.0 - 7.1.1.10, 7.2.0 - 7.2.1.3, and 8.0.0 - 8.0.0.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97222 - http://www.securityfocus.com/archive/1/540338/30/0/threaded
CVE ID: CVE-2017-4981 State: PUBLISHED Published: 2017-06-14T21:00:00 Last Updated: 2024-08-05T14:47:44.092Z Vendors: n/a Products: RSA BSAFE Cert-C RSA BSAFE Cert-C version 2.9.0.5 Problem Types: Improper Certificate Processing Vulnerability Description: EMC RSA BSAFE Cert-C before 2.9.0.5 contains a potential improper certificate processing vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038695 - http://www.securityfocus.com/archive/1/540720/30/0/threaded - http://www.securityfocus.com/bid/99044
CVE ID: CVE-2017-4982 State: PUBLISHED Published: 2017-05-08T21:00:00 Last Updated: 2024-08-05T14:47:43.801Z Vendors: n/a Products: EMC Mainframe Enablers ResourcePak Base versions 7.6.0, 8.0.0 and 8.1.0 Problem Types: Privilege management vulnerability Description: EMC Mainframe Enablers ResourcePak Base versions 7.6.0, 8.0.0, and 8.1.0 contains a fix for a privilege management vulnerability that could potentially be exploited by malicious users to compromise the affected system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98049 - http://www.securityfocus.com/archive/1/540531/30/0/threaded
CVE ID: CVE-2017-4983 State: PUBLISHED Published: 2017-05-04T14:00:00 Last Updated: 2024-08-05T14:47:43.625Z Vendors: n/a Products: EMC Data Domain OS 5.2 through 5.7 before 5.7.3.0 and 6.0 before 6.0.1.0 Problem Types: Privilege Escalation Vulnerability Description: EMC Data Domain OS 5.2 through 5.7 before 5.7.3.0 and 6.0 before 6.0.1.0 is affected by a privilege escalation vulnerability that may potentially be exploited by attackers to compromise the affected system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98047 - http://www.securityfocus.com/archive/1/540517/30/0/threaded - http://www.securitytracker.com/id/1038404
CVE ID: CVE-2017-4984 State: PUBLISHED Published: 2017-06-19T12:00:00 Last Updated: 2024-08-05T14:47:44.077Z Vendors: n/a Products: EMC VNX2 versions prior to OE for File 8.1.9.211, EMC VNX1 versions prior to OE for File 7.1.80.8 Problem Types: Remote code execution vulnerability Description: In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, an unauthenticated remote attacker may be able to elevate their permissions to root through a command injection. This may potentially be exploited by an attacker to run arbitrary code with root-level privileges on the targeted VNX Control Station system, aka remote code execution. Additional Analyst Note
ith root-level privileges on the targeted VNX Control Station system, aka remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/540738/30/0/threaded - http://www.securityfocus.com/bid/99039
CVE ID: CVE-2017-4985 State: PUBLISHED Published: 2017-06-19T12:00:00 Last Updated: 2024-08-05T14:47:43.635Z Vendors: n/a Products: EMC VNX2 versions prior to OE for File 8.1.9.211, EMC VNX1 versions prior to OE for File 7.1.80.8 Problem Types: Local privilege escalation vulnerability Description: In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user may potentially escalate their privileges to root due to authorization checks not being performed on certain perl scripts. This may potentially be exploited by an attacker to run arbitrary commands as root on the targeted VNX Control Station system. Additional Analyst Note
ted by an attacker to run arbitrary commands as root on the targeted VNX Control Station system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/540738/30/0/threaded - http://www.securityfocus.com/bid/99037
CVE ID: CVE-2017-4986 State: PUBLISHED Published: 2017-06-14T21:00:00 Last Updated: 2024-08-05T14:47:44.097Z Vendors: n/a Products: EMC ESRS Virtual Edition EMC ESRS VE 3.18 or earlier Problem Types: Authentication Bypass Vulnerability Description: EMC ESRS VE 3.18 or earlier contains Authentication Bypass that could potentially be exploited by malicious users to compromise the affected system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038696 - http://www.securityfocus.com/archive/1/540721/30/0/threaded - http://www.securityfocus.com/bid/99036
CVE ID: CVE-2017-4987 State: PUBLISHED Published: 2017-06-19T12:00:00 Last Updated: 2024-08-05T14:47:44.004Z Vendors: n/a Products: EMC VNX2 versions prior to OE for File 8.1.9.211, EMC VNX1 versions prior to OE for File 7.1.80.8 Problem Types: Uncontrolled search path vulnerability Description: In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user can load a maliciously crafted file in the search path which may potentially allow the attacker to execute arbitrary code on the targeted VNX Control Station system, aka an uncontrolled search path vulnerability. Additional Analyst Notes: - CVE Program Container: References:
on system, aka an uncontrolled search path vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/540738/30/0/threaded - http://www.securityfocus.com/bid/99045
CVE ID: CVE-2017-4988 State: PUBLISHED Published: 2017-06-21T20:00:00 Last Updated: 2024-08-05T14:47:44.082Z Vendors: n/a Products: EMC Isilon OneFS 8.0.1.0, 8.0.0 8.0.0.3, 7.2.0 - 7.2.1.4, 7.1.x Problem Types: Privilege Escalation Vulnerability Description: EMC Isilon OneFS 8.0.1.0, 8.0.0 - 8.0.0.3, 7.2.0 - 7.2.1.4, 7.1.x is affected by a privilege escalation vulnerability that could potentially be exploited by attackers to compromise the affected system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99165 - http://www.securityfocus.com/archive/1/540755/30/0/threaded
CVE ID: CVE-2017-4989 State: PUBLISHED Published: 2017-06-21T20:00:00 Last Updated: 2024-08-05T14:47:44.030Z Vendors: n/a Products: EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401 Problem Types: Server Authentication Bypass Vulnerability Description: In EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401, an unauthenticated remote attacker may potentially bypass the authentication process to gain access to the system maintenance page. This may be exploited by an attacker to view sensitive information, perform software updates, or run maintenance workflows. Additional Analyst Notes: - CVE Program Container: Refere
ation, perform software updates, or run maintenance workflows. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/540754/30/0/threaded - http://www.securityfocus.com/bid/99243 - http://www.securitytracker.com/id/1038718
CVE ID: CVE-2017-4990 State: PUBLISHED Published: 2017-06-21T20:00:00 Last Updated: 2024-08-05T14:47:43.817Z Vendors: n/a Products: EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226 Problem Types: Server Unauthorized File Upload Vulnerability Description: In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverage the file upload feature of the system maintenance page to load a maliciously crafted file to any directory which could allow the attacker to execute arbitrary code on the Avamar Server system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archi
vamar Server system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/540754/30/0/threaded - http://www.securityfocus.com/bid/99243 - http://www.securitytracker.com/id/1038718
CVE ID: CVE-2017-4991 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T14:47:43.640Z Vendors: n/a Products: Cloud Foundry UAA Problem Types: UAA password reset vulnerability Description: An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v260; UAA release 2.x versions prior to v2.7.4.16, 3.6.x versions prior to v3.6.10, 3.9.x versions prior to v3.9.12, and other versions prior to v3.17.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.14, 24.x versions prior to v24.9, 30.x versions prior to 30.2, and other versions prior to v36. Privileged users in one zone are allowed to perform a password reset for users in a different zo
versions prior to v36. Privileged users in one zone are allowed to perform a password reset for users in a different zone. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/cve-2017-4991/
CVE ID: CVE-2017-4992 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T14:47:43.659Z Vendors: n/a Products: Cloud Foundry Problem Types: Privilege escalation with user invitations Description: An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions prior to v3.6.11, 3.9.x versions prior to v3.9.13, and other versions prior to v4.2.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.15, 24.x versions prior to v24.10, 30.x versions prior to 30.3, and other versions prior to v37. There is privilege escalation (arbitrary password reset) with user invitations. Additional
other versions prior to v37. There is privilege escalation (arbitrary password reset) with user invitations. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/cve-2017-4992/
CVE ID: CVE-2017-4993 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-4994 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-05T14:47:43.952Z Vendors: n/a Products: Cloud Foundry Problem Types: Forwarded Headers in UAA Description: An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v263; UAA release 2.x versions prior to v2.7.4.18, 3.6.x versions prior to v3.6.12, 3.9.x versions prior to v3.9.14, and other versions prior to v4.3.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.16, 24.x versions prior to v24.11, 30.x versions prior to 30.4, and other versions prior to v40. There was an issue with forwarded http headers in UAA that could result in account corruption. Additional An
ior to v40. There was an issue with forwarded http headers in UAA that could result in account corruption. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/cve-2017-4994/
CVE ID: CVE-2017-4995 State: PUBLISHED Published: 2017-11-27T10:00:00 Last Updated: 2024-08-05T14:47:43.693Z Vendors: n/a Products: Spring Security Spring Security 4.2.0.RELEASE 4.2.2.RELEASE and Spring Security 5.0.0.M1 Problem Types: Code Execution Description: An issue was discovered in Pivotal Spring Security 4.2.0.RELEASE through 4.2.2.RELEASE, and Spring Security 5.0.0.M1. When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this vulnerability by blacklisting known "deserialization gadgets." Spring Security configures Jackson with global default typing enabled, which means that (through th
ialization gadgets." Spring Security configures Jackson with global default typing enabled, which means that (through the previous exploit) arbitrary code could be executed if all of the following is true: (1) Spring Security's Jackson support is being leveraged by invoking SecurityJackson2Modules.getModules(ClassLoader) or SecurityJackson2Modules.enableDefaultTyping(ObjectMapper); (2) Jackson is used to deserialize data that is not trusted (Spring Security does not perform deserialization using Jackson, so this is an explicit choice of the user); and (3) there is an unknown (Jackson is not blacklisting it already) "deserialization gadget" that allows code execution present on the classpath.
n (Jackson is not blacklisting it already) "deserialization gadget" that allows code execution present on the classpath. Jackson provides a blacklisting approach to protecting against this type of attack, but Spring Security should be proactive against blocking unknown "deserialization gadgets" when Spring Security enables default typing. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2017-4995 - http://www.securityfocus.com/bid/99080 - https://lists.apache.org/thread.html/4641ed8616ccc2c1fbddac2c3dc9900c96387bc226eaf0232d61909b%40%3Ccommits.cassandra.apache.org%3E - https://lists.apache.org/thread.html/rf7f87810c38dc9abf9f93989f76008f504cbf7
909b%40%3Ccommits.cassandra.apache.org%3E - https://lists.apache.org/thread.html/rf7f87810c38dc9abf9f93989f76008f504cbf7c1a355214640b2d04c%40%3Ccommits.cassandra.apache.org%3E - https://lists.apache.org/thread.html/r42ac3e39e6265db12d9fc6ae1cd4b5fea7aed9830dc6f6d58228fed7%40%3Ccommits.cassandra.apache.org%3E
CVE ID: CVE-2017-4996 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-4997 State: PUBLISHED Published: 2017-06-29T17:00:00 Last Updated: 2024-08-05T14:47:44.121Z Vendors: n/a Products: VASA Provider Virtual Appliance versions 8.3.x and prior Problem Types: Remote Code Execution Vulnerability Description: EMC VASA Provider Virtual Appliance versions 8.3.x and prior has an unauthenticated remote code execution vulnerability that could potentially be exploited by malicious users to compromise the affected system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99169 - http://www.securityfocus.com/archive/1/540783/30/0/threaded
CVE ID: CVE-2017-4998 State: PUBLISHED Published: 2017-07-07T00:00:00 Last Updated: 2024-08-05T14:47:43.769Z Vendors: n/a Products: RSA Archer version 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 Problem Types: Cross-Site Request Forgery Vulnerability Description: EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is potentially affected by a cross-site request forgery vulnerability. A remote low privileged attacker may potentially exploit the vulnerability to execute unauthorized requests on behalf of the victim, using the authenticated user's privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99354 - http:/
ileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99354 - http://www.securitytracker.com/id/1038815 - http://seclists.org/fulldisclosure/2017/Jun/49
CVE ID: CVE-2017-4999 State: PUBLISHED Published: 2017-07-07T00:00:00 Last Updated: 2024-08-05T14:47:44.127Z Vendors: n/a Products: RSA Archer version 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 Problem Types: Authorization Bypass Through User-Controlled Key Vulnerability Description: EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an authorization bypass through user-controlled key vulnerability in Discussion Forum Messages. A remote low privileged attacker may potentially exploit this vulnerability to elevate their privileges and view other users' discussion forum messages. Additional Analyst Notes: - CVE Program Container: References: - http://w
d view other users' discussion forum messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99354 - http://www.securitytracker.com/id/1038815 - http://seclists.org/fulldisclosure/2017/Jun/49
CVE ID: CVE-2017-5000 State: PUBLISHED Published: 2017-07-07T00:00:00 Last Updated: 2024-08-05T14:47:43.711Z Vendors: n/a Products: RSA Archer version 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 Problem Types: Information Disclosure Vulnerability Description: EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an information exposure through an error message vulnerability. A remote low privileged attacker may potentially exploit this vulnerability to use information disclosed in an error message to launch another more focused attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99354 - http://www.sec
Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99354 - http://www.securitytracker.com/id/1038815 - http://seclists.org/fulldisclosure/2017/Jun/49
CVE ID: CVE-2017-5001 State: PUBLISHED Published: 2017-07-07T00:00:00 Last Updated: 2024-08-05T14:47:44.162Z Vendors: n/a Products: RSA Archer version 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 Problem Types: Cross Site Scripting Vulnerability Description: EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an information exposure through an error message vulnerability. A remote low privileged attacker may potentially exploit this vulnerability to use information disclosed in an error message to launch another more focused attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99354 - http://www.secur
ditional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99354 - http://www.securitytracker.com/id/1038815 - http://seclists.org/fulldisclosure/2017/Jun/49
CVE ID: CVE-2017-5002 State: PUBLISHED Published: 2017-07-07T00:00:00 Last Updated: 2024-08-05T14:47:43.841Z Vendors: n/a Products: RSA Archer version 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 Problem Types: Open Redirect Vulnerability Description: EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an open redirect vulnerability. A remote unprivileged attacker may potentially redirect legitimate users to arbitrary web sites and conduct phishing attacks. The attacker could then steal the victims' credentials and silently authenticate them to the RSA Archer application without the victims realizing an attack occurred. Additional Analyst Notes: - CVE P
e them to the RSA Archer application without the victims realizing an attack occurred. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99354 - http://www.securitytracker.com/id/1038815 - http://seclists.org/fulldisclosure/2017/Jun/49
CVE ID: CVE-2017-5003 State: PUBLISHED Published: 2017-06-09T21:00:00 Last Updated: 2024-08-05T14:47:43.892Z Vendors: n/a Products: RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels, RSA Via Lifecycle and Governance version 7.0, all patch levels, RSA Identity Management and Governance (RSA IMG) versions 6.9.1, all patch levels Problem Types: Reflected Cross Site Scripting Vulnerabilities and Stored Cross Site Scripting Vulnerabilities Description: EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2 (all patch levels); RSA Via Lifecycle and Governance version 7.0 (all patch levels); and RSA Identity Management and Governance (IMG) version 6.9.1 (all pat
e and Governance version 7.0 (all patch levels); and RSA Identity Management and Governance (IMG) version 6.9.1 (all patch levels) have Reflected Cross Site Scripting vulnerabilities that could potentially be exploited by malicious users to compromise an affected system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038648 - http://www.securityfocus.com/bid/98974 - http://www.securityfocus.com/archive/1/540693/30/0/threaded
CVE ID: CVE-2017-5004 State: PUBLISHED Published: 2017-06-09T21:00:00 Last Updated: 2024-08-05T14:47:43.671Z Vendors: n/a Products: RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels, RSA Via Lifecycle and Governance version 7.0, all patch levels, RSA Identity Management and Governance (RSA IMG) versions 6.9.1, all patch levels Problem Types: Reflected Cross Site Scripting Vulnerabilities and Stored Cross Site Scripting Vulnerabilities Description: EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2 (all patch levels); RSA Via Lifecycle and Governance version 7.0 (all patch levels); and RSA Identity Management and Governance (IMG) version 6.9.1 (all pat