emc rsa identity governance and lifecycle

Name: emc rsa identity governance and lifecycle
Brand: emc

productUS

cpe:2.3:a:emc:rsa_identity_governance_and_lifecycle:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical4high4medium0low

updated 2026-10-28

vulnerabilities (8)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-1245US	high8.8OT elevated	2.49% (85th)	—	no fix	2018-07-13	3 versions
CVE-2017-8004US	high7.2	2.15% (82nd)	—	no fix	2017-07-17	6 versions
CVE-2018-1255US	medium6.1	1.30% (70th)	—	no fix	2018-07-13	3 versions
CVE-2017-8005US	medium5.4	1.21% (68th)	—	no fix	2017-07-17	6 versions
CVE-2017-5003US	medium6.1	1.17% (67th)	—	no fix	2017-06-09	2 versions
CVE-2017-5004US	medium5.4	0.97% (62nd)	—	no fix	2017-06-09	2 versions
CVE-2018-11049US	high7.3	0.45% (39th)	—	no fix	2018-07-11	= 7.1.0
CVE-2018-1182US	high7.8	0.41% (35th)	—	no fix	2018-03-08	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-427Uncontrolled Search Path Element1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.