CVE-2005-3329

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-10-27 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in RSA Authentication Agent for Web 5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the image parameter in a GetPic operation.

Affected products

Dell EMC RSA Authentication Agent for Web for IIS, RSA Authentication Agent for Web for Apache Web Server: through 5.3; 5.1, 5.1.1, 5.2

References

http://marc.info/?l=bugtraq&m=113028928630700&w=2
http://marc.info/?l=full-disclosure&m=113027017101376&w=2
http://marc.info/?l=full-disclosure&m=113027324906876&w=2
http://secunia.com/advisories/17331
http://securityreason.com/securityalert/116
http://securitytracker.com/id?1015105
http://www.securityfocus.com/bid/15206
http://www.vupen.com/english/advisories/2005/2203
http://marc.info/?l=bugtraq&m=113028928630700&w=2
http://marc.info/?l=full-disclosure&m=113027017101376&w=2
http://marc.info/?l=full-disclosure&m=113027324906876&w=2
http://secunia.com/advisories/17331

Get alerted when CVE-2005-3329 or the next vulnerability affects your stack