CVE-2017-5004 — EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2 (all patch levels); RSA Via Lifecycle and Governance version 7.0 (all patch levels); and RSA Identity Management and Governance (IMG) version 6.9.1 (all patch levels) have Stored Cross Site Scripting vulnerabilities that could potentially be exploited by malicious users to compromise an affected system

Back Back to CVE browser

MEDIUM

EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2 (all patch levels); RSA Via Lifecycle and Governance version 7.0 (all patch levels); and RSA Identity Management and Governance (IMG) version 6.9.1 (all patch levels) have Stored Cross Site Scripting vulnerabilities that could potentially be exploited by malicious users to compromise an affected system

Published Jun 9, 2017

5.4

MEDIUM

CVSS 3.1

EPSS 0.97%

Description

EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2 (all patch levels); RSA Via Lifecycle and Governance version 7.0 (all patch levels); and RSA Identity Management and Governance (IMG) version 6.9.1 (all patch levels) have Stored Cross Site Scripting vulnerabilities that could potentially be exploited by malicious users to compromise an affected system.

Affected products

Remediation

No remediation recorded yet.

Metrics

0.97% 0.00975

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00975

Score over time

2021–2026

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Percentile over time

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Table of values (9 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.97% (0.00975)	60.71th	v5 (v2026.06.15)
Sep 20, 2026	0.97% (0.00975)	60.57th	v5 (v2026.06.15)
Jul 20, 2024	0.07% (0.00071)	31.36th	v3 (v2023.03.01)
Jun 14, 2024	0.07% (0.00071)	30.94th	v3 (v2023.03.01)
Mar 7, 2023	0.07% (0.00071)	28.94th	v3 (v2023.03.01)
Mar 6, 2023	0.89% (0.00890)	30.33th	v2 (v2022.01.01)
Feb 4, 2022	0.95% (0.00954)	16.28th	v2 (v2022.01.01)
Feb 3, 2022	0.83% (0.00833)	24.58th	v5 (v2026.06.15)
Apr 14, 2021	0.83% (0.00833)	0.00th	v1

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

http://www.securityfocus.com/archive/1/540693/30/0/threaded
x_refsource_CONFIRMBroken LinkThird Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/98968
vdb-entryx_refsource_BIDBroken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1038648
vdb-entryx_refsource_SECTRACKBroken LinkThird Party AdvisoryVDB Entry
https://web.archive.org/web/20210116013250/http://www.securityfocus.com/archive/1/540693/30/0/threaded
Third Party Advisory

Link	Providers	Tags
http://www.securityfocus.com/archive/1/540693/30/0/threaded		x_refsource_CONFIRMBroken LinkThird Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/98968		vdb-entryx_refsource_BIDBroken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1038648		vdb-entryx_refsource_SECTRACKBroken LinkThird Party AdvisoryVDB Entry
https://web.archive.org/web/20210116013250/http://www.securityfocus.com/archive/1/540693/30/0/threaded		Third Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner dell

Published Jun 9, 2017

Updated Aug 5, 2024

Reserved Dec 29, 2016

Link CVE-2017-5004

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-5004

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-5004