Network Security Manager (Mcafee) - vulnerabilities (CVEs)

19 CVEs, 0 in the last 30 days, 31 known versions, newest CVE from 2021-12-09. Vendor: Mcafee.

CVEs of Network Security Manager

CVE-2021-4038 - CVSS 4.8 (medium), 2021-12-09: Cross Site Scripting (XSS) vulnerability in McAfee Network Security Manager (NSM) prior to 10.1 Minor 7 allows a remote authenticated administrator to embed a…
CVE-2020-7258 - CVSS 4.8 (medium), 2020-03-18: Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact…
CVE-2020-7256 - CVSS 4.8 (medium), 2020-03-18: Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact…
CVE-2019-3602 - CVSS 4.8 (medium), 2019-05-15: Cross Site Scripting (XSS) vulnerability in McAfee Network Security Manager (NSM) Prior to 9.1 Update 5 allows an authenticated administrator to embed an XSS…
CVE-2019-3606 - CVSS 7.7 (high), 2019-03-26: Data Leakage Attacks vulnerability in the web portal component when in an MDR pair in McAfee Network Security Management (NSM) 9.1 < 9.1.7.75 (Update 4) and…
CVE-2019-3597 - CVSS 9.8 (critical), 2019-03-26: Authentication Bypass vulnerability in McAfee Network Security Manager (NSM) 9.1 < 9.1.7.75.2 and 9.2 < 9.2.7.31 (9.2 Update 2) allows unauthenticated users…
CVE-2018-6681 - CVSS 5.5 (medium), 2018-07-17: Abuse of Functionality vulnerability in the web interface in McAfee Network Security Management (NSM) 9.1.7.11 and earlier allows authenticated users to allow…
CVE-2017-3968 - CVSS 9.1 (critical), 2018-06-13: Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfee Network Data Loss Prevention (NDLP)…
CVE-2017-3960 - CVSS 8.8 (high), 2018-06-12: Exploitation of Authorization vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated users to…
CVE-2017-3962 - CVSS 9.8 (critical), 2018-06-12: Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management (NSM) before…
CVE-2017-3961 - CVSS 5.4 (medium), 2018-05-25: Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated users to…
CVE-2017-3965 - CVSS 8.8 (high), 2018-04-04: Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows…
CVE-2017-3969 - CVSS 8.2 (high), 2018-04-04: Abuse of communication channels vulnerability in the server in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows man-in-the-middle attackers…
CVE-2017-3964 - CVSS 5.4 (medium), 2018-04-04: Reflective Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to…
CVE-2017-3967 - CVSS 6.1 (medium), 2018-04-04: Target influence via framing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to…
CVE-2017-3966 - CVSS 6.4 (medium), 2018-04-04: Exploitation of session variables, resource IDs and other trusted credentials vulnerability in the web interface in McAfee Network Security Management (NSM)…
CVE-2017-3971 - CVSS 8.2 (high), 2018-04-04: Cryptanalysis vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to view confidential…
CVE-2017-3972 - CVSS 9.8 (critical), 2018-04-03: Infrastructure-based foot printing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to…
CVE-2014-2390 - CVSS 6.8 (medium), 2014-08-29: Cross-site request forgery (CSRF) vulnerability in the User Management module in McAfee Network Security Manager (NSM) before 6.1.15.39 7.1.5.x before…