CVE-2017-3961 SB10192 - Network Security Management (NSM) - Cross-Site Scripting (XSS) vulnerability
MediumCVSS 5.4
EPSS 0.59%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated users to allow arbitrary HTML code to be reflected in the response web page via crafted user input of attributes.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee network security manager | < 8.2.7.42.2 | 8.2.7.42.2 |
| mcafee Network Security Management (NSM) | >= 8.2.7.42.2, < 8.2.7.42.2 | 8.2.7.42.2 |