CVE-2017-3964

Reflective Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to inject arbitrary web script or HTML via a URL parameter.

Score

CVSS 3.0 5.4 Medium

Status

Modified - trellixpsirt@trellix.com

Published

2018-04-04

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• Network Security Management Nsm (Mcafee)
• Network Security Manager (Mcafee)

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10192