CVE-2018-1247

RSA Authentication Manager Security Console, version 8.3 and earlier, contains a XML External Entity (XXE) vulnerability. This could potentially allow admin users to cause a denial of service or extract server data via injecting a maliciously crafted DTD in an XML file submitted to the application.

• CWE-611

• http://seclists.org/fulldisclosure/2018/May/18Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/104107Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040835Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/44634/Exploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/May/18Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/104107Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040835Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/44634/Exploit, Third Party Advisory, VDB Entry

Published

May 8, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12464A SQL injection vulnerability in the web administration and …10
• CVE-2018-12465An OS command injection vulnerability in the web administrat…9.1
• CVE-2018-12466openSUSE openbuildservice before 9.2.4 allowed authenticated…4.4
• CVE-2018-12467Authorized users of the openbuildservice before 2.9.4 could …6
• CVE-2018-12468A vulnerability in the administration console of Micro Focus…9.1
• CVE-2018-12469Incorrect handling of an invalid value for an HTTP request p…
• CVE-2018-12470A SQL Injection in the RegistrationSharing module of SUSE Li…9.8
• CVE-2018-12471A External Entity Reference ('XXE') vulnerability in SUSE Li…6.5
• CVE-2018-12472A improper authentication using the HOST header in SUSE Linu…7.3
• CVE-2018-12473A path traversal traversal vulnerability in obs-service-tar_…3.1
• CVE-2018-12474Improper input validation in obs-service-tar_scm of Open Bui…5.4
• CVE-2018-12475A Externally Controlled Reference to a Resource in Another S…5.4