CVE-2008-7266 Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in RSA Adaptive Authentication 2.x and 5.7.x allows remote attackers to inject arbitrary web script or HTML via unknown....
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in RSA Adaptive Authentication 2.x and 5.7.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rsa adaptive authentication | = 2.0 | No fix listed |
| rsa adaptive authentication | = 5.7.0 | No fix listed |
| rsa adaptive authentication | = 5.7.2 | No fix listed |
| rsa adaptive authentication | = 5.7.3 | No fix listed |
References
- 42332 third-party-advisory vendor-advisory
- 20101123 ESA-2010-019: RSA, The Security Division of EMC, is reissuing this advisory regarding a potential cross-site scripting vulnerability that has been identified in RSAR Adaptive Authentication (On Premise) versions 2.x and 5.7.x. Patch 105162 mailing-list
- 1024775 vdb-entry
- ADV-2010-3055 vdb-entry vendor-advisory
- knowledge.rsasecurity.com