CVE-2016-0901

Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-0900.

Score

CVSS 3.0 6.1 Medium

Status

Modified - security_alert@emc.com

Published

2016-05-07

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Rsa Authentication Manager (Emc)

References

• http://packetstormsecurity.com/files/136994/RSA-Authentication-Manager-XSS-HTTP-Response-Splitting.html
• http://seclists.org/bugtraq/2016/May/23
• http://www.securitytracker.com/id/1035755