Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2018-1255

Reflected Cross-Site Scripting Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dell

Description

RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to a vulnerable web application, which is then reflected back to the victim and executed by the web browser.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

RSA RSA Identity Governance and Lifecycle

  • version 7.0.1, all patch levelsaffected
  • version 7.0.2, all patch levelsaffected
  • version 7.1.0, all patch levelsaffected

References