CVE-2015-4539

Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Identity Management & Governance (IMG) before 7.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

• CWE-79

• http://seclists.org/bugtraq/2015/Sep/36Third Party Advisory
• http://www.securitytracker.com/id/1033520Third Party Advisory, VDB Entry
• http://seclists.org/bugtraq/2015/Sep/36Third Party Advisory
• http://www.securitytracker.com/id/1033520Third Party Advisory, VDB Entry

Published

Sep 26, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-4533EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 befo…
• CVE-2015-4534Java Method Server (JMS) in EMC Documentum Content Server be…
• CVE-2015-4535Java Method Server (JMS) in EMC Documentum Content Server be…
• CVE-2015-4536EMC Documentum Content Server before 7.0 P20, 7.1 before P18…
• CVE-2015-4537Lockbox in EMC Documentum D2 before 4.5 uses a hardcoded pas…
• CVE-2015-4538The XML parser in EMC Atmos before 2.2.3.426 and 2.3.x befor…
• CVE-2015-4540Multiple cross-site scripting (XSS) vulnerabilities in EMC R…
• CVE-2015-4541Multiple cross-site scripting (XSS) vulnerabilities in EMC R…
• CVE-2015-4542EMC RSA Archer GRC 5.x before 5.5.3 allows remote authentica…
• CVE-2015-4543EMC RSA Archer GRC 5.x before 5.5.3 uses cleartext for store…
• CVE-2015-4544EMC Documentum Content Server before 7.1P20 and 7.2.x before…
• CVE-2015-4545EMC Isilon OneFS 7.1 before 7.1.1.8, 7.2.0 before 7.2.0.4, a…