CVE-2019-18574

RSA Authentication Manager software versions prior to 8.4 P8 contain a stored cross-site scripting vulnerability in the Security Console. A malicious Security Console administrator could exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface which could then be included in a report. When other Security Console administrators open the affected report, the injected scripts could potentially be executed in their browser.

• CWE-79
• CWE-79

• https://www.dell.com/support/security/en-us/details/DOC-109297/DSA-2019-168-RSA&#174%3B-Authentication-Manager-Software-Stored-Cross-Site-Scripting-Vulnerability
• https://www.dell.com/support/security/en-us/details/DOC-109297/DSA-2019-168-RSA&#174%3B-Authentication-Manager-Software-Stored-Cross-Site-Scripting-Vulnerability

Published

Dec 3, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-18567Bromium client version 4.0.3.2060 and prior to 4.1.7 Update …6.3
• CVE-2019-18568Avira Free Antivirus 15.0.1907.1514 is prone to a local priv…8.8
• CVE-2019-1857A vulnerability in the web-based management interface of Cis…6.1
• CVE-2019-18571The RSA Identity Governance and Lifecycle and RSA Via Lifecy…5.4
• CVE-2019-18572The RSA Identity Governance and Lifecycle and RSA Via Lifecy…9.8
• CVE-2019-18573The RSA Identity Governance and Lifecycle and RSA Via Lifecy…8.8
• CVE-2019-18575Dell Command Configure versions prior to 4.2.1 contain an un…7.1
• CVE-2019-18576Dell EMC XtremIO XMS versions prior to 6.3.0 contain an info…6.7
• CVE-2019-18577Dell EMC XtremIO XMS versions prior to 6.3.0 contain an inco…6.7
• CVE-2019-18578Dell EMC XtremIO XMS versions prior to 6.3.0 contain a store…9
• CVE-2019-18579Settings for the Dell XPS 13 2-in-1 (7390) BIOS versions pri…6.8
• CVE-2019-1858A vulnerability in the Simple Network Management Protocol (S…8.6