CVE-2017-5004: XSS
EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2 (all patch levels); RSA Via Lifecycle and Governance version 7.0 (all patch levels); and RSA Identity Management and Governance (IMG) version 6.9.1 (all patch levels) have Stored Cross Site Scripting vulnerabilities that could potentially be exploited by malicious users to compromise an affected system.
Affected Software
Event History
Frequently Asked Questions
What products are affected by CVE-2017-5004?
CVE-2017-5004 affects EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, RSA Via Lifecycle and Governance version 7.0, and RSA Identity Management and Governance version 6.9.1.
What type of vulnerability is CVE-2017-5004?
CVE-2017-5004 is classified as a Stored Cross Site Scripting vulnerability.
What are the potential impacts of CVE-2017-5004?
The potential impacts of CVE-2017-5004 include unauthorized access and data leakage due to exploit of the stored XSS.
How can I mitigate CVE-2017-5004?
To mitigate CVE-2017-5004, users should apply the latest patches or updates provided by EMC for the affected products.
Is CVE-2017-5004 still a risk for organizations using the affected software?
Yes, organizations using the affected versions of the software remain at risk for CVE-2017-5004 unless they implement the necessary patches.