Authentication Manager
Vendor:
First CVE: Jul 13, 2012 · Active for 14 years
13
Total CVEs
More Total CVEs than 91% of tracked products
3.3
Avg CVEs / Year
Higher CVE frequency than 81% of tracked products
5.3
Avg CVSS
Higher Avg CVSS than 9% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Authentication Manager over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 13, 2012
14 years ago
Most Recent CVE
Dec 3, 2019
2,425 days ago
CVE Severity & Scoring
Authentication Manager13 CVEs
15%
62%
23%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local2 (15.4%)
Network6 (46.2%)
Unknown5 (38.5%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low7 (53.8%)
High1 (7.7%)
Unknown5 (38.5%)
User Interaction
None2 (15.4%)
Unknown5 (38.5%)
Required6 (46.2%)
Privileges Required
Low1 (7.7%)
High3 (23.1%)
None4 (30.8%)
Unknown5 (38.5%)
Top CVEs
Signals from CVEs in this product scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-1247HIGH RSA Authentication Manager Security Console, version 8.3 and earlier, contains a XML External Entity (XXE) vulnerability. This could potentially allow admin users to cause a denial | May 8, 2018 | 7.1 | 41 | NO | YES |
CVE-2019-3711HIGH RSA Authentication Manager versions prior to 8.4 P1 contain an Insecure Credential Management Vulnerability. A malicious Operations Console administrator may be able to obtain the | Mar 13, 2019 | 7.2 | 25 | NO | NO |
CVE-2018-15782HIGH The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal vulnerability. A local attacker could potentially provide a | Jan 16, 2019 | 7.8 | 23 | NO | NO |
CVE-2018-11074MEDIUM RSA Authentication Manager versions prior to 8.3 P3 are affected by a DOM-based cross-site scripting vulnerability which exists in its embedded MadCap Flare Help files. A remote un | Sep 28, 2018 | 6.1 | 21 | NO | NO |
CVE-2018-1248MEDIUM RSA Authentication Manager Security Console, Operation Console and Self-Service Console, version 8.3 and earlier, is affected by a Host header injection vulnerability. This could a | May 8, 2018 | 6.1 | 21 | NO | NO |
CVE-2012-2279MEDIUM Open redirect vulnerability in the Security Console in EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 allows remote attackers to red | Jul 13, 2012 | 6.4 | 20 | NO | NO |
CVE-2018-11075MEDIUM RSA Authentication Manager versions prior to 8.3 P3 contain a reflected cross-site scripting vulnerability in a Security Console page. A remote, unauthenticated malicious user, wit | Sep 28, 2018 | 4.7 | 19 | NO | NO |
CVE-2018-11073MEDIUM RSA Authentication Manager versions prior to 8.3 P3 contain a stored cross-site scripting vulnerability in the Operations Console. A malicious Operations Console administrator coul | Sep 28, 2018 | 4.8 | 18 | NO | NO |
CVE-2012-2280MEDIUM EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 do not properly use frames, which allows remote attackers to inject arbitrary web scr | Jul 13, 2012 | 5.0 | 18 | NO | NO |
CVE-2019-18574MEDIUM RSA Authentication Manager software versions prior to 8.4 P8 contain a stored cross-site scripting vulnerability in the Security Console. A malicious Security Console administrator | Dec 3, 2019 | 4.8 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (13 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
7.7% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (13 CVEs).
Media Mentions
Signals from CVEs in this product scope (13 CVEs).
Top CNAs Publishing CVEs For Authentication Manager
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 8.0 | 2 | 2.1 | 0.3% | 0 | 0 |
| 7.1 | 4 | 4.5 | 0.9% | 0 | 0 |