Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2019-3725

Command Injection vulnerability

RSA Netwitness Platform versions prior to 11.2.1.1 and RSA Security Analytics versions prior to 10.6.6.1 are vulnerable to a Command Injection vulnerability due to missing input validation in the product. A remote unauthenticated malicious user could exploit this vulnerability to execute arbitrary commands on the server.

CVSS 3.0 · 9.8 Critical EPSS 2.8% KEV · Not listed
Vendors
Rsa
Products
Netwitness Security Analytics
CVE-2019-3724

Authorization Bypass VulnerabilityRSA Netwitness Platform

RSA Netwitness Platform versions prior to 11.2.1.1 is vulnerable to an Authorization Bypass vulnerability. A remote low privileged attacker could potentially exploit this vulnerability to gain access to administrative information including credentials.

CVSS 3.0 · 6.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Rsa
Products
Netwitness Platform Security Analytics