Vulnerabilities (CVE)

Filtered by vendor Emc Subscribe
Filtered by product Rsa Security Analytics
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-11061 1 Emc 2 Rsa Netwitness, Rsa Security Analytics 2019-10-09 9.0 HIGH 9.1 CRITICAL
RSA NetWitness Platform versions prior to 11.1.0.2 and RSA Security Analytics versions prior to 10.6.6 are vulnerable to a server-side template injection vulnerability due to insecure configuration of the template engine used in the product. A remote authenticated malicious RSA NetWitness Server user with an Admin or Operator role could exploit this vulnerability to execute arbitrary commands on the server with root privileges.