CVE-2018-1247

CVE-2018-1247: vulnerability in Dell EMC RSA Authentication Manager Security…

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 16%
from disclosure to weapon8 days
Published on NVDMay 8
1st PoC+8d
RSA Authentication Manager Security Console, version 8.3 and earlier, contains a XML External Entity (XXE) vulnerability. This could potentially allow admin users to cause a denial of service or extract server data via injecting a maliciously crafted DTD in an XML file submitted to the application.
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.