Description (CNA)
RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to a vulnerable web application, which is then reflected back to the victim and executed by the web browser.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| RSA / RSA Identity Governance and Lifecycle | affected version 7.0.1, all patch levels; affected version 7.0.2, all patch levels; affected version 7.1.0, all patch levels |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.