CVE-2015-0521: XSS
Cross-site scripting (XSS) vulnerability in EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the CMP shared secret parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0521?
CVE-2015-0521 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2015-0521?
To fix CVE-2015-0521, upgrade to EMC RSA Certificate Manager and RSA Registration Manager version 6.9 build 558 or later.
Who is affected by CVE-2015-0521?
CVE-2015-0521 affects users of EMC RSA Certificate Manager versions prior to 6.9 build 558 and RSA Registration Manager versions prior to 6.9 build 558.
What type of vulnerability is CVE-2015-0521?
CVE-2015-0521 is a cross-site scripting (XSS) vulnerability that allows for the injection of arbitrary web scripts or HTML.
Can remote attackers exploit CVE-2015-0521?
Yes, remote authenticated users can exploit CVE-2015-0521 to inject malicious scripts or HTML through specific parameters.