EMC RSA Adaptive Authentication (On-Premise) versions prior to 7.3 P2 (exclusive) contains a fix for a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
http://www.securitytracker.com/id/1038469 | vdb entry |
http://www.securityfocus.com/archive/1/540552/30/0/threaded | vdb entry third party advisory |
http://www.securityfocus.com/bid/98392 | vdb entry third party advisory |