CVE-2018-1247

RSA Authentication Manager Security Console, version 8.3 and earlier, contains a XML External Entity (XXE) vulnerability

published May 8, 2018

CVSS
—
EPSS
16%
Percentile
96.9
In the wild
Unconfirmed
What it is

RSA Authentication Manager Security Console, version 8.3 and earlier, contains a XML External Entity (XXE) vulnerability. This could potentially allow admin users to cause a denial of service or extract server data via injecting a maliciously crafted DTD in an XML file submitted to the application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.15758 · 96.9th percentile
Published
2018-05-08T13:00Z
EPSS history
Timeline
  • 08 MAY 13:00Z
    RSA Authentication Manager Security Console, version 8.3 and earlier, contains a XML External Entity (XXE) vulnerability
    cvelistv5