CVE-2008-7266
UnknownEPSS 1.13%
Last modified
CVE-2008-7266 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in RSA Adaptive Authentication 2.x and 5.7.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors.. EPSS estimates a 1.13% chance of exploitation in the next 30 days.
Description
Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in RSA Adaptive Authentication 2.x and 5.7.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Rsa | Adaptive Authentication | 2.0 |
| Rsa | Adaptive Authentication | 5.7.0 |
| Rsa | Adaptive Authentication | 5.7.2 |
| Rsa | Adaptive Authentication | 5.7.3 |
References
- http://secunia.com/advisories/42332Vendor Advisory
- http://www.vupen.com/english/advisories/2010/3055Vendor Advisory
- http://secunia.com/advisories/42332Vendor Advisory
- http://www.vupen.com/english/advisories/2010/3055Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-7266?
Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in RSA Adaptive Authentication 2.x and 5.7.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
How severe is CVE-2008-7266?
Severity scoring for CVE-2008-7266 is pending analysis. The EPSS model estimates a 1.13% probability of exploitation in the next 30 days.
How do I fix CVE-2008-7266?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-7260Rejected reason: This candidate is unused by its CNA.
- CVE-2008-7261The Workplace (aka WP) component in IBM FileNet P8 Applicati…
- CVE-2008-7262Multiple directory traversal vulnerabilities in FTPServer.py…
- CVE-2008-7263ftpserver.py in pyftpdlib before 0.5.0 does not delay its re…
- CVE-2008-7264The ftp_QUIT function in ftpserver.py in pyftpdlib before 0.…
- CVE-2008-7265The pr_data_xfer function in ProFTPD before 1.3.2rc3 allows …
- CVE-2008-7267SQL injection vulnerability in announcements.php in SiteEngi…
- CVE-2008-7268The phpinfo function in SiteEngine 5.x allows remote attacke…
- CVE-2008-7269Open redirect vulnerability in api.php in SiteEngine 5.x all…
- CVE-2008-7270OpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHA…
- CVE-2008-7271Multiple cross-site scripting (XSS) vulnerabilities in the H…
- CVE-2008-7272FireGPG before 0.6 handle user’s passphrase and decrypted cl…7.5
Are you affected by CVE-2008-7266?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST