Rsa vulnerabilitiesNone on the known-exploited list.
Rsa has 114 published vulnerabilities across 40 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Archer, with 33. If you run Rsa software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Rsa products have the most vulnerabilities?
Archer leads with 33 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Rsa vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Rsa's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Rsa flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 55%CVE-2005-4734Medium
Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows remote attackers to execute arbitrary code via a long url parameter in the...
- 16%CVE-2018-1247High
RSA Authentication Manager Security Console, version 8.3 and earlier, contains a XML External Entity (XXE) vulnerability.
- 3.0%CVE-2017-14377Critical
EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prior to Build 618 have a security vulnerability that could potentially lead...
- 3.0%CVE-2018-11060High
RSA Archer, versions prior to 6.4.0.1, contain an authorization bypass vulnerability in the REST API.
- 2.8%CVE-2019-3725Critical
RSA Netwitness Platform versions prior to 11.2.1.1 and RSA Security Analytics versions prior to 10.6.6.1 are vulnerable to a Command Injection vulnerability due to missing input validation in the product.
- 2.7%CVE-2012-0397High
Buffer overflow in EMC RSA SecurID Software Token Converter before 2.6.1 allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors.
- 2.7%CVE-2018-1232High
RSA Authentication Agent version 8.0.1 and earlier for Web for both IIS and Apache Web Server are impacted by a stack-based buffer overflow which may occur when handling certain malicious web cookies that have...
- 2.6%CVE-2005-1471High
Heap-based buffer overflow in RSA SecurID Web Agent 5, 5.2, and 5.3 allows remote attackers to execute arbitrary code via crafted chunked-encoding data.
- 2.5%CVE-2005-1118Medium
Cross-site scripting (XSS) vulnerability in IISWebAgentIF.dll in the RSA Authentication Agent for Web 5.2 allows remote attackers to inject arbitrary web script or HTML via the postdata parameter.
All Rsa products we track.
37 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Archerarcher33 vulnerabilities44 versions
- Authentication Managerauthentication_manager13 vulnerabilities9 versions
- Envisionenvision11 vulnerabilities7 versions
- Authentication Agent for Webauthentication_agent_for_web8 vulnerabilities6 versions
- Archer Grc Platformarcher_grc_platform7 vulnerabilities11 versions
- Rsa Via Lifecycle and Governancersa_via_lifecycle_and_governance6 vulnerabilities6 versions
- Web Threat Detectionweb_threat_detection6 vulnerabilities14 versions
- Securidsecurid5 vulnerabilities4 versions
- Access Manager Serveraccess_manager_server3 vulnerabilities6 versions
- Authentication Agentauthentication_agent3 vulnerabilities2 versions
- Securid Appliancesecurid_appliance3 vulnerabilities4 versions
- Securid Web Agentsecurid_web_agent3 vulnerabilities6 versions
- Access Manager Agentaccess_manager_agent2 vulnerabilities1 version
- Ace Serverace_server2 vulnerabilities6 versions
- Netwitnessnetwitness2 vulnerabilities2 versions
- Ace Agentace_agent1 vulnerability1 version
- Adaptive Authenticationadaptive_authentication1 vulnerability4 versions
- Authentication Agent for Windowsauthentication_agent_for_windows1 vulnerability3 versions
- Authentication APIauthentication_api1 vulnerability1 version
- Authentication Clientauthentication_client1 vulnerability3 versions
- Federated Identity Managerfederated_identity_manager1 vulnerability2 versions
- Keon Certificate Authority Managerkeon_certificate_authority_manager1 vulnerability2 versions
- Keon Registration Authority Web Interfacekeon_registration_authority_web_interface1 vulnerability1 version
- Multifactor Authentication Agentmultifactor_authentication_agent1 vulnerability1 version
This directory lists the 37 Rsa products with at least one tracked version, of 40 in our catalogue.
Running Rsa? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows remote attackers to execute arbitrary code via a long url parameter in the Redirect method.
- Matched to
- Authentication Agent for Web on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 114 published vulnerabilities across 40 products and 163 versions from Rsa.
None of Rsa's vulnerabilities is on the list of flaws known to be exploited today.
Archer, with 33 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Rsa products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.