CVE-2014-0638
04.04.2014, 15:09
Cross-site scripting (XSS) vulnerability in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a "cross-frame scripting" issue.
| Vendor | Product | Version |
|---|---|---|
| emc | rsa_adaptive_authentication_on-premise | 6.0 |
| emc | rsa_adaptive_authentication_on-premise | 6.0.2.1 |
| emc | rsa_adaptive_authentication_on-premise | 6.0.2.1:sp1_patch2 |
| emc | rsa_adaptive_authentication_on-premise | 6.0.2.1:sp1_patch3 |
| emc | rsa_adaptive_authentication_on-premise | 6.0.2.1:sp2 |
| emc | rsa_adaptive_authentication_on-premise | 6.0.2.1:sp2_patch1 |
| emc | rsa_adaptive_authentication_on-premise | 6.0.2.1:sp3 |
| emc | rsa_adaptive_authentication_on-premise | 6.0.2.1:sp3_p3 |
| emc | rsa_adaptive_authentication_on-premise | 7.0 |
| emc | rsa_adaptive_authentication_on-premise | 7.1 |
𝑥
= Vulnerable software versions