Cross-site scripting (XSS) vulnerability in the logon page in RSA EnVision 3.3.6 Build 0115 allows remote attackers to inject arbitrary web script or HTML via the username field.
- http://securityreason.com/securityalert/3137
No PoCs found on GitHub currently.