Rsa Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Not Defined	48
Risk Management System	30
Access Management Software	4

Product

RSA Archer	28
RSA enVision	10
RSA SecurID	10
RSA Authentication Manager	2
RSA BSAFE SSL-J	2

Remediation

Official Fix	74
Temporary Fix	0
Workaround	0
Unavailable	2
Not Defined	6

Exploitability

High	10
Functional	0
Proof-of-Concept	10
Unproven	12
Not Defined	50

Access Vector

Not Defined	0
Physical	0
Local	4
Adjacent	4
Network	74

Authentication

Not Defined	0
High	4
Low	20
None	58

User Interaction

Not Defined	0
Required	28
None	54

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	2
≤4	6
≤5	14
≤6	22
≤7	14
≤8	14
≤9	4
≤10	6

CVSSv3 Temp

≤1	0
≤2	0
≤3	4
≤4	4
≤5	18
≤6	26
≤7	18
≤8	2
≤9	6
≤10	4

VulDB

≤1	0
≤2	0
≤3	4
≤4	6
≤5	20
≤6	14
≤7	14
≤8	16
≤9	2
≤10	6

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	8
≤6	2
≤7	2
≤8	6
≤9	2
≤10	2

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	4
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	0
<5k	6
<10k	24
<25k	44
<50k	8
<100k	0
≥100k	0

Exploit Today

<1k	74
<2k	4
<5k	4
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Products (37): ACE (1), ACE Server (1), Access Manager Agent (1), Access Manager Server (2), Ace Agent (1), Adaptive Authentication (6), Agent (1), Archer (21), Archer eGRC (1), Authentication Agent (4), Authentication Agent For Web (1), Authentication Agent for Web (3), Authentication Client (1), Authentication Manager (3), BSAFE Crypto-C (1), BSAFE Crypto-J (1), BSAFE Micro Edition Suite (2), BSAFE SSL-J (1), BSAFE SSL-J SDK (1), Bsafe Crypto-c (1), Bsafe Crypto-c Me Mfp Psos (1), Data Protection Manager Appliance (2), EnVision (2), Enterprise Compromise Assessment Tool (1), Federated Identity Manager (1), Identity Governance (1), KEON (1), KEON Registration Authority Web Interface (1), Keon Certificate Authority Manager (1), Lifecycle (1), MFA Agent (1), NetWitness Platform (1), RSAREF (1), SSL-J (1), SecurID (5), WebID (1), enVision (9)

Link to Vendor Website: https://www.rsa.com/

Published	Base	Temp	Vulnerability	Prod	Exp	Rem	EPSS	CTI	CVE
03/28/2023	5.4	5.3	RSA NetWitness Platform Endpoint Windows Agent memory corruption	Unknown	Not Defined	Official Fix	0.00051	0.00	CVE-2022-47529
03/30/2022	3.7	3.7	RSA Archer RSS Feed access control	Risk Management System	Not Defined	Official Fix	0.00158	0.00	CVE-2022-26948
03/30/2022	5.4	5.3	RSA Archer cross site scripting	Risk Management System	Not Defined	Official Fix	0.00078	0.00	CVE-2022-26951
03/30/2022	4.9	4.8	RSA Archer cross site scripting	Risk Management System	Not Defined	Official Fix	0.00066	0.00	CVE-2022-26947
03/30/2022	5.0	4.9	RSA Archer redirect	Risk Management System	Not Defined	Official Fix	0.00078	0.04	CVE-2022-26950
03/30/2022	5.8	5.7	RSA Archer Attachment access control	Risk Management System	Not Defined	Official Fix	0.00114	0.02	CVE-2022-26949
03/30/2022	6.3	6.0	RSA Archer Endpoint CheckTaskAccess access control	Risk Management System	Not Defined	Official Fix	0.00065	0.00	CVE-2021-41594
05/26/2021	2.9	2.9	RSA Archer Tableau cleartext storage	Risk Management System	Not Defined	Not Defined	0.00044	0.00	CVE-2021-29253
05/26/2021	3.5	3.4	RSA Archer cross site scripting	Risk Management System	Not Defined	Official Fix	0.00078	0.00	CVE-2021-29252
01/29/2021	3.8	3.6	RSA Archer API access control	Risk Management System	Not Defined	Official Fix	0.00135	0.00	CVE-2020-29538

72 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 72 results.

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!