Skip to content
OpenAdvisories

Vendor

RSA

17 known vulnerabilities.

RSA at a glance

Last 12 months
0
Critical · all time
2
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202510
Jan 202500
Dec 202400

Products

BSAFE Micro Edition Suite 5 Authentication Manager 5 BSAFE Crypto-C Micro Edition 2 RSA Netwitness Platform 2 RSA Identity Governance and Lifecycle 2 Certificate Manager Path Traversal Vulnerability 1 RSA Security Analytics 1 RSA Authentication Manager 1 Web Threat Detection 1 BSAFE 0 BSAFE < 4.0.5.3 0 BSAFE < 4.0.11 0 BSAFE < 4.1.6.1 0 SecurID 0

Latest advisories

  • Critical max 10.0
    WID-SEC-2022-0351 1 CVE 1 exploited rev. 45

    Apache log4j: Schwachstelle ermöglicht Codeausführung

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache log4j ausnutzen, um beliebigen Programmcode auszuführen.

    IBM Cisco Red Hat Dell Siemens Linux Windows
    first Dec 9, 2021
  • Low max 4.3
    WID-SEC-2025-0387 1 CVE

    RSA Authentication Manager: Schwachstelle ermöglicht Manipulation von Dateien

    Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in RSA Authentication Manager ausnutzen, um Dateien zu manipulieren.

    RSA Windows
  • Medium max 7.5
    WID-SEC-2024-0282 6 CVEs rev. 3

    RSA BSAFE: Mehrere Schwachstellen

    Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in RSA BSAFE ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.

    RSA EMC Linux Windows
    first Sep 30, 2019
  • Medium max 7.5
    WID-SEC-2024-0283 5 CVEs rev. 2

    RSA BSAFE: Mehrere Schwachstellen

    Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in RSA BSAFE ausnutzen, um einen Denial of Service Angriff durchzuführen, vertrauliche Daten einzusehen oder die Kryptographie zu umgehen.

    RSA EMC Linux Windows
    first Aug 28, 2018
  • Medium
    WID-SEC-2024-0285 5 CVEs rev. 3

    RSA BSAFE: Mehrere Schwachstellen

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in RSA BSAFE ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff oder weiter Angriffe mit nicht spezifizierten Auswirkungen durchführen.

    RSA EMC Linux Windows
    first Aug 20, 2015
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Medium 4.3
    CVE-2024-25066

    RSA Authentication Manager before 8.7 SP2 Patch 1 allows XML External Entity (XXE) attacks via a license file, resultin…

    RSA Authentication Manager
  • Critical 9.8
    CVE-2019-3725

    Command Injection vulnerability

    RSA Netwitness Platform versions prior to 11.2.1.1 and RSA Security Analytics versions prior to 10.6.6.1 are vulnerable to a Command Injection vulnerability due to missing input validation in the product. A remote unauthenticated malicious user could exploit …

    RSA RSA Netwitness Platform RSA Security Analytics
  • Medium 6.5
    CVE-2019-3724

    Authorization Bypass VulnerabilityRSA Netwitness Platform

    RSA Netwitness Platform versions prior to 11.2.1.1 is vulnerable to an Authorization Bypass vulnerability. A remote low privileged attacker could potentially exploit this vulnerability to gain access to administrative information including credentials.

    RSA RSA Netwitness Platform
  • Medium 6.1
    CVE-2018-11074

    DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities

    RSA Authentication Manager versions prior to 8.3 P3 are affected by a DOM-based cross-site scripting vulnerability which exists in its embedded MadCap Flare Help files. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking…

    RSA Authentication Manager
  • Medium 6.5
    CVE-2018-11073

    DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities

    RSA Authentication Manager versions prior to 8.3 P3 contain a stored cross-site scripting vulnerability in the Operations Console. A malicious Operations Console administrator could exploit this vulnerability to store arbitrary HTML or JavaScript code through…

    RSA Authentication Manager
  • Medium 5.8
    CVE-2018-11075

    DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities

    RSA Authentication Manager versions prior to 8.3 P3 contain a reflected cross-site scripting vulnerability in a Security Console page. A remote, unauthenticated malicious user, with the knowledge of a target user's anti-CSRF token, could potentially exploit t…

    RSA Authentication Manager
  • High 7.5
    CVE-2018-11058

    RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-…

    RSA BSAFE Micro Edition Suite BSAFE Crypto-C Micro Edition
  • Medium 4.4
    CVE-2018-11055

    RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x), contains an Imprope…

    RSA BSAFE Micro Edition Suite
  • Medium 6.5
    CVE-2018-11056

    RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.…

    RSA BSAFE Micro Edition Suite BSAFE Crypto-C Micro Edition
  • Medium 5.9
    CVE-2018-11057

    RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x) contains a Covert Ti…

    RSA BSAFE Micro Edition Suite
  • High 7.5
    CVE-2018-11054

    RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A remote attacker could use m…

    RSA BSAFE Micro Edition Suite
  • Critical 9.0
    CVE-2018-1245

    Authorization ByPass Vulnerability

    RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains an authorization bypass vulnerability within the workflow architect component (ACM). A remote authenticated malicious user with non-admin privileges could potentially bypass the Ja…

    RSA RSA Identity Governance and Lifecycle
  • Medium 6.1
    CVE-2018-1255

    Reflected Cross-Site Scripting Vulnerability

    RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malic…

    RSA RSA Identity Governance and Lifecycle
  • High 7.5
    CVE-2018-11051

    RSA Certificate Manager Path Traversal Vulnerability

    RSA Certificate Manager Versions 6.9 build 560 through 6.9 build 564 contain a path traversal vulnerability in the RSA CMP Enroll Server and the RSA REST Enroll Server. A remote unauthenticated attacker could potentially exploit this vulnerability by manipula…

    RSA Certificate Manager Path Traversal Vulnerability
  • Medium 6.5
    CVE-2018-1253

    Stored cross-site scripting vulnerability

    RSA Authentication Manager Operation Console, versions 8.3 P1 and earlier, contains a stored cross-site scripting vulnerability. A malicious Operations Console administrator could potentially exploit this vulnerability to store arbitrary HTML or JavaScript co…

    RSA Authentication Manager
  • Unscored —
    CVE-2018-1254

    RSA Authentication Manager Security Console, versions 8.3 P1 and earlier, contains a reflected cross-site scripting vul…

    RSA RSA Authentication Manager
  • Unscored —
    CVE-2018-1252

    RSA Web Threat Detection SQL Injection Vulnerability

    RSA Web Threat Detection versions prior to 6.4, contain an SQL injection vulnerability in the Administration and Forensics applications. An authenticated malicious user with low privileges could potentially exploit this vulnerability to execute SQL commands o…

    RSA Web Threat Detection