RSA Authentication Manager versions prior to 8.3 P1 suffer from XML external entity injection and host header injection vulnerabilities. Continue reading...