Description
Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise (AAOP) 2.x, 5.7.x, and 6.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
References
- 1025382 vdb-entry
- 47408 vdb-entry
- 8215 third-party-advisory
- ADV-2011-1026 vdb-entry
- 20110418 ESA-2011-014: RSA, The Security Division of EMC, announces the release of Adaptive Authentication (On-Premise) Flash File Security Patch mailing-list
- 44236 third-party-advisory