CVE-2019-3602

Cross Site Scripting (XSS) vulnerability in McAfee Network Security Manager (NSM) Prior to 9.1 Update 5 allows an authenticated administrator to embed an XSS in the administrator interface via a specially crafted custom rule containing HTML.

Score

CVSS 3.0 4.8 Medium

Status

Modified - trellixpsirt@trellix.com

Published

2019-05-15

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Network Security Manager (Mcafee)
• Mcafee Network Security Manager Nsm (Mcafee Llc)

References

• http://www.securityfocus.com/bid/108400
• https://kc.mcafee.com/corporate/index?page=content&id=SB10281