CVE-2012-4611

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-11-27 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Adaptive Authentication On-Premise (AAOP) before 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

EMC Rsa Adaptive Authentication On-Premise: through 6.0.2.1; 2.0, 5.7.0, 5.7.2, 5.7.3, 6.0, 6.0.2.1 (+5)

References

http://archives.neohapsis.com/archives/bugtraq/2012-11/0096.html
http://osvdb.org/87876
http://packetstormsecurity.com/files/118381/RSA-Adaptive-Authentication-On-Premise-6.x-XSS.html
http://secunia.com/advisories/51394
http://www.securityfocus.com/bid/56699
http://www.securitytracker.com/id?1027811
http://archives.neohapsis.com/archives/bugtraq/2012-11/0096.html
http://osvdb.org/87876
http://packetstormsecurity.com/files/118381/RSA-Adaptive-Authentication-On-Premise-6.x-XSS.html
http://secunia.com/advisories/51394
http://www.securityfocus.com/bid/56699
http://www.securitytracker.com/id?1027811

Get alerted when CVE-2012-4611 or the next vulnerability affects your stack