CVE-2016-8215

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

EMC RSA Security Analytics 10.5.3 and 10.6.2 contains fixes for a Reflected Cross-Site Scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	EMC RSA Security Analytics versions prior to 10.6.2	EMC RSA Security Analytics versions prior to 10.6.2

References

http://www.securityfocus.com/archive/1/540032/30/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/95718Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037666
http://www.securityfocus.com/archive/1/540032/30/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/95718Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037666

Timeline

Published: Jan 25, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-82166.7EMC Data Domain OS (DD OS) 5.4 all versions, EMC Data Domain OS (DD OS) 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS (DD OS)CVE-2016-82173.7EMC RSA BSAFE Crypto-J versions prior to 6.2.2 has a PKCS#12 Timing Attack Vulnerability. A possible timing attack could be carried out by m CVE-2016-82189.8An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete CVE-2016-82196.5An issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI-release versions prior to 1.12.0. A user with CVE-2016-82207.5Pivotal Gemfire for PCF, versions 1.6.x prior to 1.6.5.0 and 1.7.x prior to 1.7.1.0, contain an information disclosure vulnerability. The ap CVE-2016-82217.0Privilege Escalation in Lenovo XClarity Administrator earlier than 1.2.0, if LXCA is used to manage rack switches or chassis with embedded i CVE-2016-82224.4A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacker with Windows CVE-2016-82237.8During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Interface Foundation softw CVE-2016-82244.4A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a sy CVE-2016-82257.8Unquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions earlier than 1.21 allows local users to exec CVE-2016-82264.9The BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of service via updating a UEFI data structure.CVE-2016-82277.8Privilege escalation vulnerability in Lenovo Transition application used in Lenovo Yoga, Flex and Miix systems running Windows allows local