CVE-2018-1255: Reflected Cross-Site Scripting Vulnerability

Security readout for executives and security teams

CVE-2018-1255 is a reflected cross-site scripting issue in RSA Identity Governance and Lifecycle. An attacker could lure a legitimate user into submitting malicious HTML or JavaScript that the application reflects into their browser. This can expose limited data or alter limited browser-session actions, but it requires user interaction. Exposure is most relevant where affected RSA Identity Governance and Lifecycle web interfaces are reachable by users and an attacker can convince a user to follow a crafted interaction. Public internet exposure would raise business urgency, but the bundle does not confirm typical deployment exposure. Treat as a moderate-priority remediation for identity governance environments. The vulnerability can affect user browser sessions, but it requires user interaction and has no cited active exploitation in the bundle. Prioritize systems with broad access or privileged user populations. Mitigation focus: Inventory RSA Identity Governance and Lifecycle versions across all environments.; Check RSA DSA-2018-084 for supported fixes, updates, or workarounds.; Prioritize remediation for internet-reachable or broadly accessible instances..

Prepared

May 25, 2026, 04:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.