CVE-2018-1247: RSA Authentication Manager Security Console, version 8.3 and earlier, contains a XML External Entity (XXE)...

Security readout for executives and security teams

RSA Authentication Manager Security Console 8.3 and earlier could mishandle XML files submitted by administrators. A malicious XML definition could let an admin user disrupt the server or extract server data. This is most urgent where the console is still deployed, internet-reachable, or shared among many administrators. Exposure is likely limited to Dell EMC RSA Authentication Manager Security Console deployments running version 8.3 or earlier. Risk is higher when administrative console access is broadly available, remotely reachable, or accepts XML from multiple privileged operators. Treat this as a focused identity-infrastructure risk. It is not described as remotely exploitable by unauthenticated users, but affected authentication management systems are sensitive and should be upgraded or tightly restricted. Mitigation focus: Check Dell EMC/RSA DSA-2018-086 for vendor-approved updates or workarounds.; Upgrade affected RSA Authentication Manager installations where vendor guidance provides a fixed version.; Restrict Security Console access to trusted administrative networks and accounts..

Prepared

Jun 7, 2026, 13:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.