RSA Identity Governance AND Lifecycle

DATE	CVE	VULNERABILITY TITLE	RISK
2019-12-18	CVE-2019-18573	Session Fixation vulnerability in Dell RSA Identity Governance and Lifecycle The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a Session Fixation vulnerability. network low complexity dell CWE-384	8.8
2019-12-18	CVE-2019-18572	Insufficiently Protected Credentials vulnerability in Dell RSA Identity Governance and Lifecycle The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain an Improper Authentication vulnerability. network low complexity dell CWE-522 critical	9.8
2019-12-18	CVE-2019-18571	Cross-site Scripting vulnerability in Dell RSA Identity Governance and Lifecycle The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a reflected cross-site scripting vulnerability in the My Access Live module [MAL]. network low complexity dell CWE-79	5.4
2019-09-11	CVE-2019-3763	Information Exposure Through Log Files vulnerability in Dell products The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain an information exposure vulnerability. local low complexity dell CWE-532	7.8
2019-09-11	CVE-2019-3761	Cross-site Scripting vulnerability in Dell products The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a stored cross-site scripting vulnerability in the Access Request module. network low complexity dell CWE-79	5.4
2019-09-11	CVE-2019-3760	SQL Injection vulnerability in Dell products The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a SQL Injection vulnerability in Workflow Architect. network low complexity dell CWE-89	8.8
2019-09-11	CVE-2019-3759	Code Injection vulnerability in Dell products The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a code injection vulnerability. network low complexity dell CWE-94	8.1