CVE-2013-6180: EMC RSA Security Analytics (SA) 10.x before 10.3, and RSA NetWitness NextGen 9.8, does not ensure that SA C...

Security readout for executives and security teams

This CVE describes a flaw in older EMC RSA Security Analytics and RSA NetWitness NextGen products where requests meant to come only from the Security Analytics REST UI were not properly restricted. A remote attacker could send Core requests from a browser or other unintended client and bypass intended access controls. Exposure is most likely in organizations still operating these legacy RSA Security Analytics or NetWitness NextGen versions. Risk depends on whether SA Core request paths are reachable by users, browsers, or network segments that were not intended to access them. Treat this as a legacy-product exposure check. It is not KEV-listed in the provided data, but affected systems should be upgraded, isolated, or retired because the flaw weakens access boundaries around security monitoring infrastructure. Mitigation focus: Identify any RSA Security Analytics 10.x or NetWitness NextGen 9.8 deployments.; Upgrade Security Analytics 10.x to 10.3 or later where applicable.; Check RSA advisory ESA-2013-080 for product-specific remediation guidance..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.