CyberSecBulletin

Rsa vulnerabilities

We track 3 vulnerabilities in Rsa products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 24, 2025.

3vulnerabilities
1critical
2high
0exploited
8.3average CVSS score

Latest Rsa vulnerabilities

  • 9.8 Critical severity

    Authentication Agent For Windows: Relative Path Traversal

    CVE-2024-47856Rsa

    In RSA Authentication Agent before 7.4.7, service paths and shortcut paths may be vulnerable to path interception if the path has one or more spaces and is not surrounded by quotation marks. An adversary can place an executable in a higher-level directory of t

  • 7.5 High severity

    netwitness_platform: Incorrect Default Permissions

    CVE-2024-28058Rsa

    In RSA NetWitness (NW) Platform before 12.5.1, even when an administrator revokes the access of a specific user with an active session, an internal threat actor could impersonate the revoked user and gain unauthorized access to sensitive data.

  • 7.5 High severity

    Archer: Insufficiently Protected Credentials

    CVE-2022-26948Rsa

    The Archer RSS feed integration for Archer 6.x through 6.9 SP1 (6.9.1.0) is affected by an insecure credential storage vulnerability. A malicious attacker may obtain access to credential information to use it in further attacks.