CVE-2014-0638

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-04-04 · updated 2026-06-17
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a "cross-frame scripting" issue.

Affected products

EMC Rsa Adaptive Authentication On-Premise: 6.0, 6.0.2.1, 6.0.2.1-sp1_patch2, 6.0.2.1-sp1_patch3, 6.0.2.1-sp2, 6.0.2.1-sp2_patch1 (+4)

References

http://archives.neohapsis.com/archives/bugtraq/2014-04/0007.html
http://archives.neohapsis.com/archives/bugtraq/2014-04/0007.html

Get alerted when CVE-2014-0638 or the next vulnerability affects your stack