CVE-2018-1247 is an XML External Entity (XXE) vulnerability affecting RSA Authentication Manager Security Console versions 8.3 and earlier. This flaw allows authenticated administrative users to inject a malicious DTD into an XML file, potentially leading to denial of service or extraction of sensitive server data. With a CVSS score of 7.1 (High) and a FAUCET Risk Score of 97/100, the vulnerability is considered severe due to its high impact on confidentiality and availability. While not listed on the KEV catalog, exploit code is publicly available on ExploitDB, though there is minimal community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 8.3CPE matchmatch criteria | cpe:2.3:a:rsa:authentication_manager:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.