CVE-2017-5003: XSS
First published: Fri Jun 09 2017(Updated: )
EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2 (all patch levels); RSA Via Lifecycle and Governance version 7.0 (all patch levels); and RSA Identity Management and Governance (IMG) version 6.9.1 (all patch levels) have Reflected Cross Site Scripting vulnerabilities that could potentially be exploited by malicious users to compromise an affected system.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| EMC RSA Identity Management and Governance | =7.0.1 | |
| EMC RSA Identity Management and Governance | =7.0.2 | |
| EMC RSA Identity Management and Governance | =6.9.1 | |
| Dell RSA Identity Governance and Lifecycle | =7.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-5003?
CVE-2017-5003 has a medium severity level due to its potential for reflected cross-site scripting attacks.
How do I fix CVE-2017-5003?
To fix CVE-2017-5003, apply the latest patches released by EMC for the affected versions of RSA Identity Governance and Lifecycle.
What versions are affected by CVE-2017-5003?
CVE-2017-5003 affects EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, RSA Via Lifecycle and Governance version 7.0, and RSA Identity Management and Governance version 6.9.1.
What type of vulnerability is CVE-2017-5003?
CVE-2017-5003 is classified as a reflected cross-site scripting (XSS) vulnerability.
What can attackers do with CVE-2017-5003?
Attackers exploiting CVE-2017-5003 could potentially execute arbitrary scripts in the context of the user's browser.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/emc
- canonical/emc rsa identity management and governance
- version/emc rsa identity management and governance/7.0.1
- version/emc rsa identity management and governance/7.0.2
- version/emc rsa identity management and governance/6.9.1
- vendor/rsa
- canonical/dell rsa identity governance and lifecycle
- version/dell rsa identity governance and lifecycle/7.0