{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1185 Browser Session Hijacking","home_page_url":"https://patchfirst.co/technique/T1185/","feed_url":"https://patchfirst.co/feed/technique/T1185.json","description":"New and newly exploited CVEs that lead to ATT&CK T1185 Browser Session Hijacking, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2023-34192#kev","url":"https://patchfirst.co/cve/CVE-2023-34192/","title":"[KEV] CVE-2023-34192: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","content_text":"Synacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2025-02-25. ENISA EUVD lists it as exploited. EPSS 77.3% (higher than 99.56% of CVEs). CVSS 9.0 CRITICAL. Public exploit code exists. ATT&CK: T1055 Process Injection; T1059 Command and Scripting Interpreter; T1185 Browser Session Hijacking. Priority 69.2 of 100.","summary":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","date_published":"2025-02-25T00:00:00.000Z","date_modified":"2026-06-17T06:03:05.000Z","tags":["kev","public-exploit","T1055","T1059","T1185"],"_patchfirst":{"reason":"kev","priority":69.2,"kev":{"dateAdded":"2025-02-25","ransomware":false},"epss":{"score":0.77266,"percentile":0.99555},"cvss":{"score":9,"severity":"CRITICAL","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","techniqueIds":["T1055","T1059","T1185"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2012-0767#kev","url":"https://patchfirst.co/cve/CVE-2012-0767/","title":"[KEV] CVE-2012-0767: Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","content_text":"Adobe · Flash Player. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 6.2% (higher than 93.5% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1185 Browser Session Hijacking; T1098 Account Manipulation; T1114.002 Remote Email Collection. Priority 46.0 of 100.","summary":"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","date_published":"2022-06-08T00:00:00.000Z","date_modified":"2026-06-16T23:38:13.000Z","tags":["kev","T1204.001","T1185","T1098","T1114.002"],"_patchfirst":{"reason":"kev","priority":46,"kev":{"dateAdded":"2022-06-08","ransomware":false},"epss":{"score":0.06187,"percentile":0.93491},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Adobe","product":"Flash Player","techniqueIds":["T1204.001","T1185","T1098","T1114.002"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2017-0210#kev","url":"https://patchfirst.co/cve/CVE-2017-0210/","title":"[KEV] CVE-2017-0210: Microsoft Internet Explorer Privilege Escalation Vulnerability","content_text":"Microsoft · Internet Explorer. In CISA KEV since 2022-05-24. ENISA EUVD lists it as exploited. EPSS 22.3% (higher than 97.7% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1185 Browser Session Hijacking. Priority 48.7 of 100.","summary":"Microsoft Internet Explorer Privilege Escalation Vulnerability","date_published":"2022-05-24T00:00:00.000Z","date_modified":"2026-06-17T00:57:16.000Z","tags":["kev","T1189","T1185"],"_patchfirst":{"reason":"kev","priority":48.7,"kev":{"dateAdded":"2022-05-24","ransomware":false},"epss":{"score":0.22334,"percentile":0.97684},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Internet Explorer","techniqueIds":["T1189","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-24682#kev","url":"https://patchfirst.co/cve/CVE-2022-24682/","title":"[KEV] CVE-2022-24682: Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability","content_text":"Synacor · Zimbra Collaborate Suite (ZCS). In CISA KEV since 2022-02-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 30.9% (higher than 98.3% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 76.9 of 100.","summary":"Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability","date_published":"2022-02-25T00:00:00.000Z","date_modified":"2026-08-07T05:16:55.000Z","tags":["kev","ransomware","public-exploit","T1204.001","T1059.007","T1185"],"_patchfirst":{"reason":"kev","priority":76.9,"kev":{"dateAdded":"2022-02-25","ransomware":true},"epss":{"score":0.30931,"percentile":0.98256},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Synacor","product":"Zimbra Collaborate Suite (ZCS)","techniqueIds":["T1204.001","T1059.007","T1185"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2020-15162","url":"https://patchfirst.co/cve/CVE-2020-15162/","title":"CVE-2020-15162: Stored XSS in PrestaShop","content_text":"PrestaShop · PrestaShop. Not in CISA KEV. EPSS 0.8% (higher than 56.4% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1059 Command and Scripting Interpreter; T1185 Browser Session Hijacking. Priority 15.1 of 100.","summary":"Stored XSS in PrestaShop","date_published":"2020-09-24T00:00:00.000Z","date_modified":"2024-08-04T13:08:22.000Z","tags":["T1059","T1185"],"_patchfirst":{"reason":"published","priority":15.1,"kev":null,"epss":{"score":0.00795,"percentile":0.56404},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.1"},"vendor":"PrestaShop","product":"PrestaShop","techniqueIds":["T1059","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-15183","url":"https://patchfirst.co/cve/CVE-2020-15183/","title":"CVE-2020-15183: Reflected XSS leading to RCE in SoyCMS","content_text":"inunosinsi · soycms. Not in CISA KEV. EPSS 1.7% (higher than 77.8% of CVEs). CVSS 8.4 HIGH. ATT&CK: T1059 Command and Scripting Interpreter; T1185 Browser Session Hijacking. Priority 21.4 of 100.","summary":"Reflected XSS leading to RCE in SoyCMS","date_published":"2020-09-17T00:00:00.000Z","date_modified":"2024-08-04T13:08:22.000Z","tags":["T1059","T1185"],"_patchfirst":{"reason":"published","priority":21.4,"kev":null,"epss":{"score":0.01747,"percentile":0.77797},"cvss":{"score":8.4,"severity":"HIGH","version":"3.1"},"vendor":"inunosinsi","product":"soycms","techniqueIds":["T1059","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-15179","url":"https://patchfirst.co/cve/CVE-2020-15179/","title":"CVE-2020-15179: HTML Injection in ScratchSig","content_text":"InternationalScratchWiki · wiki-scratchsig. Not in CISA KEV. EPSS 1.2% (higher than 68.6% of CVEs). CVSS 8.0 HIGH. ATT&CK: T1059 Command and Scripting Interpreter; T1185 Browser Session Hijacking. Priority 19.3 of 100.","summary":"HTML Injection in ScratchSig","date_published":"2020-09-15T00:00:00.000Z","date_modified":"2024-08-04T13:08:22.000Z","tags":["T1059","T1185"],"_patchfirst":{"reason":"published","priority":19.3,"kev":null,"epss":{"score":0.0122,"percentile":0.6864},"cvss":{"score":8,"severity":"HIGH","version":"3.1"},"vendor":"InternationalScratchWiki","product":"wiki-scratchsig","techniqueIds":["T1059","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-3460","url":"https://patchfirst.co/cve/CVE-2020-3460/","title":"CVE-2020-3460: Cisco Data Center Network Manager Cross-Site Scripting Vulnerability","content_text":"Cisco · Cisco Data Center Network Manager. Not in CISA KEV. EPSS 0.7% (higher than 53.7% of CVEs). CVSS 4.7 MEDIUM. ATT&CK: T1565.002 Transmitted Data Manipulation; T1185 Browser Session Hijacking. Priority 14.0 of 100.","summary":"Cisco Data Center Network Manager Cross-Site Scripting Vulnerability","date_published":"2020-07-31T00:00:00.000Z","date_modified":"2024-11-13T18:18:29.000Z","tags":["T1565.002","T1185"],"_patchfirst":{"reason":"published","priority":14,"kev":null,"epss":{"score":0.00716,"percentile":0.53741},"cvss":{"score":4.7,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Data Center Network Manager","techniqueIds":["T1565.002","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-15118","url":"https://patchfirst.co/cve/CVE-2020-15118/","title":"CVE-2020-15118: Cross-Site Scripting in Wagtail","content_text":"wagtail · wagtail. Not in CISA KEV. EPSS 1.1% (higher than 65.7% of CVEs). CVSS 5.7 MEDIUM. ATT&CK: T1059 Command and Scripting Interpreter; T1185 Browser Session Hijacking. Priority 17.1 of 100.","summary":"Cross-Site Scripting in Wagtail","date_published":"2020-07-20T00:00:00.000Z","date_modified":"2024-08-04T13:08:21.000Z","tags":["T1059","T1185"],"_patchfirst":{"reason":"published","priority":17.1,"kev":null,"epss":{"score":0.01101,"percentile":0.65668},"cvss":{"score":5.7,"severity":"MEDIUM","version":"3.1"},"vendor":"wagtail","product":"wagtail","techniqueIds":["T1059","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-11083","url":"https://patchfirst.co/cve/CVE-2020-11083/","title":"CVE-2020-11083: Stored XSS in October","content_text":"October CMS · October. Not in CISA KEV. EPSS 1.1% (higher than 66.8% of CVEs). CVSS 3.5 LOW. Public exploit code exists. ATT&CK: T1185 Browser Session Hijacking. Priority 20.8 of 100.","summary":"Stored XSS in October","date_published":"2020-07-14T00:00:00.000Z","date_modified":"2024-08-04T11:21:14.000Z","tags":["public-exploit","T1185"],"_patchfirst":{"reason":"published","priority":20.8,"kev":null,"epss":{"score":0.01148,"percentile":0.66778},"cvss":{"score":3.5,"severity":"LOW","version":"3.1"},"vendor":"October CMS","product":"October","techniqueIds":["T1185"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2020-11055","url":"https://patchfirst.co/cve/CVE-2020-11055/","title":"CVE-2020-11055: Cross-site Scripting in BookStack","content_text":"BookStackApp · BookStack. Not in CISA KEV. EPSS 0.8% (higher than 56% of CVEs). CVSS 6.3 MEDIUM. ATT&CK: T1059 Command and Scripting Interpreter; T1185 Browser Session Hijacking. Priority 15.6 of 100.","summary":"Cross-site Scripting in BookStack","date_published":"2020-05-07T00:00:00.000Z","date_modified":"2024-08-04T11:21:14.000Z","tags":["T1059","T1185"],"_patchfirst":{"reason":"published","priority":15.6,"kev":null,"epss":{"score":0.00782,"percentile":0.55965},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1"},"vendor":"BookStackApp","product":"BookStack","techniqueIds":["T1059","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-11036","url":"https://patchfirst.co/cve/CVE-2020-11036/","title":"CVE-2020-11036: XSS in GLPI","content_text":"glpi-project · GLPI. Not in CISA KEV. EPSS 0.8% (higher than 56.7% of CVEs). CVSS 7.6 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 16.7 of 100.","summary":"XSS in GLPI","date_published":"2020-05-05T00:00:00.000Z","date_modified":"2024-08-04T11:21:14.000Z","tags":["T1189","T1059.007","T1185"],"_patchfirst":{"reason":"published","priority":16.7,"kev":null,"epss":{"score":0.00804,"percentile":0.56713},"cvss":{"score":7.6,"severity":"HIGH","version":"3.1"},"vendor":"glpi-project","product":"GLPI","techniqueIds":["T1189","T1059.007","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5283","url":"https://patchfirst.co/cve/CVE-2020-5283/","title":"CVE-2020-5283: XSS vulnerability in CVS show_subdir_lastmod support","content_text":"viewvc · viewvc. Not in CISA KEV. EPSS 1.4% (higher than 71.8% of CVEs). CVSS 3.1 LOW. ATT&CK: T1059 Command and Scripting Interpreter; T1185 Browser Session Hijacking. Priority 16.5 of 100.","summary":"XSS vulnerability in CVS show_subdir_lastmod support","date_published":"2020-04-03T00:00:00.000Z","date_modified":"2024-08-04T08:22:09.000Z","tags":["T1059","T1185"],"_patchfirst":{"reason":"published","priority":16.5,"kev":null,"epss":{"score":0.01363,"percentile":0.71751},"cvss":{"score":3.1,"severity":"LOW","version":"3.1"},"vendor":"viewvc","product":"viewvc","techniqueIds":["T1059","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5339","url":"https://patchfirst.co/cve/CVE-2020-5339/","title":"CVE-2020-5339: RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the…","content_text":"Dell · RSA Authentication Manager. Not in CISA KEV. EPSS 0.7% (higher than 51.9% of CVEs). CVSS 4.8 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 13.7 of 100.","summary":"RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the…","date_published":"2020-03-25T00:00:00.000Z","date_modified":"2024-09-17T00:06:00.000Z","tags":["T1189","T1059.007","T1185"],"_patchfirst":{"reason":"published","priority":13.7,"kev":null,"epss":{"score":0.00669,"percentile":0.51912},"cvss":{"score":4.8,"severity":"MEDIUM","version":"3.0"},"vendor":"Dell","product":"RSA Authentication Manager","techniqueIds":["T1189","T1059.007","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5340","url":"https://patchfirst.co/cve/CVE-2020-5340/","title":"CVE-2020-5340: RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the…","content_text":"Dell · RSA Authentication Manager. Not in CISA KEV. EPSS 0.7% (higher than 51.9% of CVEs). CVSS 4.8 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 13.7 of 100.","summary":"RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the…","date_published":"2020-03-25T00:00:00.000Z","date_modified":"2024-09-17T03:43:40.000Z","tags":["T1189","T1059.007","T1185"],"_patchfirst":{"reason":"published","priority":13.7,"kev":null,"epss":{"score":0.00669,"percentile":0.51912},"cvss":{"score":4.8,"severity":"MEDIUM","version":"3.0"},"vendor":"Dell","product":"RSA Authentication Manager","techniqueIds":["T1189","T1059.007","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5267","url":"https://patchfirst.co/cve/CVE-2020-5267/","title":"CVE-2020-5267: Possible XSS vulnerability in ActionView","content_text":"rails · actionview. Not in CISA KEV. EPSS 1.5% (higher than 74.6% of CVEs). CVSS 4.0 MEDIUM. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter; T1185 Browser Session Hijacking. Priority 22.7 of 100.","summary":"Possible XSS vulnerability in ActionView","date_published":"2020-03-19T00:00:00.000Z","date_modified":"2024-08-04T08:22:09.000Z","tags":["public-exploit","T1059","T1185"],"_patchfirst":{"reason":"published","priority":22.7,"kev":null,"epss":{"score":0.01525,"percentile":0.74636},"cvss":{"score":4,"severity":"MEDIUM","version":"3.1"},"vendor":"rails","product":"actionview","techniqueIds":["T1059","T1185"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2019-18578","url":"https://patchfirst.co/cve/CVE-2019-18578/","title":"CVE-2019-18578: Dell EMC XtremIO XMS versions prior to 6.3.0 contain a stored cross-site scripting vulnerability","content_text":"Dell · XtremIO. Not in CISA KEV. EPSS 1.1% (higher than 66.3% of CVEs). CVSS 9.0 CRITICAL. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 19.6 of 100.","summary":"Dell EMC XtremIO XMS versions prior to 6.3.0 contain a stored cross-site scripting vulnerability","date_published":"2020-03-13T00:00:00.000Z","date_modified":"2024-09-16T23:41:09.000Z","tags":["T1189","T1059.007","T1185"],"_patchfirst":{"reason":"published","priority":19.6,"kev":null,"epss":{"score":0.01127,"percentile":0.66293},"cvss":{"score":9,"severity":"CRITICAL","version":"3.0"},"vendor":"Dell","product":"XtremIO","techniqueIds":["T1189","T1059.007","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5241","url":"https://patchfirst.co/cve/CVE-2020-5241/","title":"CVE-2020-5241: XSS/Script injection vulnerability in matestack","content_text":"matestack · matestack-ui-core. Not in CISA KEV. EPSS 0.6% (higher than 50% of CVEs). CVSS 7.7 HIGH. ATT&CK: T1059 Command and Scripting Interpreter; T1185 Browser Session Hijacking. Priority 15.4 of 100.","summary":"XSS/Script injection vulnerability in matestack","date_published":"2020-02-12T00:00:00.000Z","date_modified":"2024-08-04T08:22:09.000Z","tags":["T1059","T1185"],"_patchfirst":{"reason":"published","priority":15.4,"kev":null,"epss":{"score":0.00627,"percentile":0.50038},"cvss":{"score":7.7,"severity":"HIGH","version":"3.1"},"vendor":"matestack","product":"matestack-ui-core","techniqueIds":["T1059","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5217","url":"https://patchfirst.co/cve/CVE-2020-5217/","title":"CVE-2020-5217: Directive injection when using dynamic overrides with user input in RubyGems secure_headers","content_text":"Twitter · secure_headers. Not in CISA KEV. EPSS 1.8% (higher than 78.8% of CVEs). CVSS 4.4 MEDIUM. ATT&CK: T1059 Command and Scripting Interpreter; T1185 Browser Session Hijacking. Priority 18.8 of 100.","summary":"Directive injection when using dynamic overrides with user input in RubyGems secure_headers","date_published":"2020-01-23T00:00:00.000Z","date_modified":"2024-08-04T08:22:08.000Z","tags":["T1059","T1185"],"_patchfirst":{"reason":"published","priority":18.8,"kev":null,"epss":{"score":0.0183,"percentile":0.78835},"cvss":{"score":4.4,"severity":"MEDIUM","version":"3.1"},"vendor":"Twitter","product":"secure_headers","techniqueIds":["T1059","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-18571","url":"https://patchfirst.co/cve/CVE-2019-18571/","title":"CVE-2019-18571: The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a…","content_text":"Dell · RSA Identity Governance & Lifecycle. Not in CISA KEV. EPSS 0.5% (higher than 43% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1204.002 Malicious File; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 12.4 of 100.","summary":"The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a…","date_published":"2019-12-18T00:00:00.000Z","date_modified":"2024-09-16T19:10:42.000Z","tags":["T1204.002","T1059.007","T1185"],"_patchfirst":{"reason":"published","priority":12.4,"kev":null,"epss":{"score":0.00503,"percentile":0.43038},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.0"},"vendor":"Dell","product":"RSA Identity Governance & Lifecycle","techniqueIds":["T1204.002","T1059.007","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-3708","url":"https://patchfirst.co/cve/CVE-2019-3708/","title":"CVE-2019-3708: Cross-Site Scripting Vulnerability in OVA file upload feature","content_text":"Dell EMC · Dell EMC IsilonSD Management Server. Not in CISA KEV. EPSS 2.2% (higher than 82.9% of CVEs). CVSS 8.3 HIGH. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 22.4 of 100.","summary":"Cross-Site Scripting Vulnerability in OVA file upload feature","date_published":"2019-04-17T00:00:00.000Z","date_modified":"2024-09-17T00:36:59.000Z","tags":["T1204.001","T1059.007","T1185"],"_patchfirst":{"reason":"published","priority":22.4,"kev":null,"epss":{"score":0.02249,"percentile":0.82876},"cvss":{"score":8.3,"severity":"HIGH","version":"3.0"},"vendor":"Dell EMC","product":"Dell EMC IsilonSD Management Server","techniqueIds":["T1204.001","T1059.007","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-11075","url":"https://patchfirst.co/cve/CVE-2018-11075/","title":"CVE-2018-11075: DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities","content_text":"RSA · Authentication Manager. Not in CISA KEV. EPSS 1.5% (higher than 74.1% of CVEs). CVSS 5.8 MEDIUM. ATT&CK: T1204.002 Malicious File; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 18.9 of 100.","summary":"DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities","date_published":"2018-09-28T00:00:00.000Z","date_modified":"2024-09-17T00:30:53.000Z","tags":["T1204.002","T1059.007","T1185"],"_patchfirst":{"reason":"published","priority":18.9,"kev":null,"epss":{"score":0.0149,"percentile":0.74077},"cvss":{"score":5.8,"severity":"MEDIUM","version":"3.0"},"vendor":"RSA","product":"Authentication Manager","techniqueIds":["T1204.002","T1059.007","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-11073","url":"https://patchfirst.co/cve/CVE-2018-11073/","title":"CVE-2018-11073: DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities","content_text":"RSA · Authentication Manager. Not in CISA KEV. EPSS 1.1% (higher than 65.9% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 17.7 of 100.","summary":"DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities","date_published":"2018-09-28T00:00:00.000Z","date_modified":"2024-09-17T01:20:47.000Z","tags":["T1189","T1059.007","T1185"],"_patchfirst":{"reason":"published","priority":17.7,"kev":null,"epss":{"score":0.0111,"percentile":0.65892},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.0"},"vendor":"RSA","product":"Authentication Manager","techniqueIds":["T1189","T1059.007","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-11059","url":"https://patchfirst.co/cve/CVE-2018-11059/","title":"CVE-2018-11059: RSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerability","content_text":"Dell EMC · RSA Archer. Not in CISA KEV. EPSS 1.4% (higher than 71.8% of CVEs). CVSS 8.2 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 20.1 of 100.","summary":"RSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerability","date_published":"2018-07-24T00:00:00.000Z","date_modified":"2024-09-16T19:14:28.000Z","tags":["T1189","T1059.007","T1185"],"_patchfirst":{"reason":"published","priority":20.1,"kev":null,"epss":{"score":0.01363,"percentile":0.71759},"cvss":{"score":8.2,"severity":"HIGH","version":"3.0"},"vendor":"Dell EMC","product":"RSA Archer","techniqueIds":["T1189","T1059.007","T1185"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}