CVEvulnerability

CVE-2017-5004

5.4 MEDIUM Published 2017-06-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-06-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
Weaknesses
CWE-79

Description

EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2 (all patch levels); RSA Via Lifecycle and Governance version 7.0 (all patch levels); and RSA Identity Management and Governance (IMG) version 6.9.1 (all patch levels) have Stored Cross Site Scripting vulnerabilities that could potentially be exploited by malicious users to compromise an affected system.

Affected configurations

• emc rsa identity governance and lifecycle 7.0.1 • emc rsa identity governance and lifecycle 7.0.2 • emc rsa identity management and governance 6.9.1 • rsa rsa via lifecycle and governance 7.0

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References