Rsa Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Not Defined	52
Risk Management System	26
Access Management Software	4

Product

RSA Archer	26
RSA SecurID	6
RSA enVision	6
RSA Authentication Agent	4
RSA Authentication Manager	4

Remediation

Official Fix	72
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	10

Exploitability

High	6
Functional	0
Proof-of-Concept	14
Unproven	8
Not Defined	54

Access Vector

Not Defined	0
Physical	2
Local	8
Adjacent	6
Network	66

Authentication

Not Defined	0
High	4
Low	26
None	52

User Interaction

Not Defined	0
Required	30
None	52

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	8
≤5	14
≤6	34
≤7	14
≤8	6
≤9	2
≤10	4

CVSSv3 Temp

≤1	0
≤2	0
≤3	2
≤4	6
≤5	20
≤6	38
≤7	10
≤8	0
≤9	4
≤10	2

VulDB

≤1	0
≤2	2
≤3	2
≤4	8
≤5	18
≤6	24
≤7	16
≤8	8
≤9	0
≤10	4

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	6
≤6	4
≤7	4
≤8	2
≤9	4
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	6
≤7	4
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	2
<2k	0
<5k	10
<10k	30
<25k	34
<50k	6
<100k	0
≥100k	0

Exploit Today

<1k	72
<2k	6
<5k	2
<10k	2
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Products (37): ACE (1), ACE Server (1), Access Manager Agent (1), Access Manager Server (2), Ace Agent (1), Adaptive Authentication (6), Agent (1), Archer (21), Archer eGRC (1), Authentication Agent (4), Authentication Agent For Web (1), Authentication Agent for Web (3), Authentication Client (1), Authentication Manager (3), BSAFE Crypto-C (1), BSAFE Crypto-J (1), BSAFE Micro Edition Suite (2), BSAFE SSL-J (1), BSAFE SSL-J SDK (1), Bsafe Crypto-c (1), Bsafe Crypto-c Me Mfp Psos (1), Data Protection Manager Appliance (2), EnVision (2), Enterprise Compromise Assessment Tool (1), Federated Identity Manager (1), Identity Governance (1), KEON (1), KEON Registration Authority Web Interface (1), Keon Certificate Authority Manager (1), Lifecycle (1), MFA Agent (1), NetWitness Platform (1), RSAREF (1), SSL-J (1), SecurID (5), WebID (1), enVision (9)

Link to Vendor Website: https://www.rsa.com/

Published	Base	Temp	Vulnerability	Prod	Exp	Rem	EPSS	CTI	CVE
03/28/2023	5.4	5.3	RSA NetWitness Platform Endpoint Windows Agent memory corruption	Unknown	Not Defined	Official Fix	0.00051	0.00	CVE-2022-47529
03/30/2022	3.7	3.7	RSA Archer RSS Feed access control	Risk Management System	Not Defined	Official Fix	0.00158	0.00	CVE-2022-26948
03/30/2022	5.4	5.3	RSA Archer cross site scripting	Risk Management System	Not Defined	Official Fix	0.00078	0.00	CVE-2022-26951
03/30/2022	4.9	4.8	RSA Archer cross site scripting	Risk Management System	Not Defined	Official Fix	0.00066	0.00	CVE-2022-26947
03/30/2022	5.0	4.9	RSA Archer redirect	Risk Management System	Not Defined	Official Fix	0.00078	0.04	CVE-2022-26950
03/30/2022	5.8	5.7	RSA Archer Attachment access control	Risk Management System	Not Defined	Official Fix	0.00114	0.02	CVE-2022-26949
03/30/2022	6.3	6.0	RSA Archer Endpoint CheckTaskAccess access control	Risk Management System	Not Defined	Official Fix	0.00065	0.00	CVE-2021-41594
05/26/2021	2.9	2.9	RSA Archer Tableau cleartext storage	Risk Management System	Not Defined	Not Defined	0.00044	0.00	CVE-2021-29253
05/26/2021	3.5	3.4	RSA Archer cross site scripting	Risk Management System	Not Defined	Official Fix	0.00078	0.00	CVE-2021-29252
01/29/2021	3.8	3.6	RSA Archer API access control	Risk Management System	Not Defined	Official Fix	0.00135	0.00	CVE-2020-29538