CVE-2012-2278: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the (1) Self-Service Console and (2) Security Console in EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2278?
CVE-2012-2278 has a moderate severity rating as it allows for multiple cross-site scripting (XSS) vulnerabilities.
How do I fix CVE-2012-2278?
To fix CVE-2012-2278, it is recommended to upgrade EMC RSA Authentication Manager to version 7.1 SP4 P14 or later, or RSA SecurID Appliance to version 3.0 SP4 or later.
What software is affected by CVE-2012-2278?
CVE-2012-2278 affects EMC RSA Authentication Manager 7.1 prior to SP4 P14 and RSA SecurID Appliance 3.0 prior to SP4 P14.
What types of attacks can CVE-2012-2278 enable?
CVE-2012-2278 enables remote attackers to inject arbitrary web scripts or HTML into affected systems.
Is there a workaround for CVE-2012-2278?
There are no documented workarounds for CVE-2012-2278, so upgrading to affected versions is necessary.