漏洞标题
N/A
漏洞描述信息
EMC RSA Identity Governance和Lifecycle、RSA 通过Lifecycle和Governance以及RSA IMG产品(RSA Identity Governance和Lifecycle版本7.0.1、7.0.2,所有补丁级别;RSA 通过Lifecycle和Governance版本7.0,所有补丁级别;RSA Identity管理和Governance(RSA IMG)版本6.9.1,所有补丁级别)受到多个存储的跨站点脚本漏洞的影响。远程授权的恶意用户 potentially 可以 inject 任 何HTML代码到应用程序中。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
The EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG products (RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels; RSA Via Lifecycle and Governance version 7.0, all patch levels; RSA Identity Management and Governance (RSA IMG) versions 6.9.1, all patch levels) are affected by multiple stored cross-site scripting vulnerabilities. Remote authenticated malicious users could potentially inject arbitrary HTML code to the application.
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
多款RSA产品跨站脚本漏洞
漏洞描述信息
EMC RSA Identity Governance and Lifecycle、RSA Via Lifecycle and Governance和RSA Identity Management and Governance都是美国易安信(EMC)公司的产品。EMC RSA Identity Governance and Lifecycle是一套生命周期管理解决方案;EMC RSA Identity Management and Governance(IMG)是一套企业级身份识别和管理解决方案;EMC
CVSS信息
N/A
漏洞类别
跨站脚本