CVE-2017-5003: EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2 (all patch levels); RSA Via Lifecycle and G...

Security readout for executives and security teams

This vulnerability is reflected cross-site scripting in several older EMC/RSA identity governance products. A malicious user could potentially make an affected system process attacker-controlled script content. Because these platforms manage identity governance, successful compromise could matter operationally, but the public bundle does not provide CVSS, a fix version, or confirmed exploitation. Exposure is likely limited to organizations still running the named RSA identity governance versions. Risk increases if the application is reachable by broad internal users, partners, or the internet. The bundle provides no CPEs or deployment context. Treat this as a targeted legacy-platform risk. If affected versions are still in use, prioritize validation because identity governance compromise can affect access oversight. Urgency is lower than confirmed exploited issues, but unsupported or exposed deployments should be addressed quickly. Mitigation focus: Identify whether any named RSA product versions remain deployed.; Check Dell EMC/RSA guidance for fixed versions or supported workarounds.; Restrict application access to trusted networks and required users..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.