CVE-2017-8005: The EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG products (RSA...

Security readout for executives and security teams

This CVE describes multiple stored cross-site scripting issues in RSA identity governance products. An authenticated malicious user could save HTML that later renders in another user’s browser. Because these systems support identity governance workflows, privileged user exposure matters, but the source bundle does not provide CVSS, affected components, or patch details. Exposure is limited to organizations running the listed RSA identity governance versions, especially where many users can create or modify stored application content. Internet exposure is not stated in the sources. Treat as a medium-priority validation item unless the affected system is still active and heavily privileged. Escalate if administrators use the application, external users can authenticate, or the product is unsupported. Mitigation focus: Confirm whether any listed RSA product and version remains deployed.; Check RSA or Dell EMC advisory guidance for fixed versions or vendor mitigations.; Restrict access to trusted users until remediation is confirmed..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.