CVE-2019-3602 Cross site scripting vulnerability in McAfee NSM impacting authenticated users
MediumCVSS 4.8
EPSS 0.62%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross Site Scripting (XSS) vulnerability in McAfee Network Security Manager (NSM) Prior to 9.1 Update 5 allows an authenticated administrator to embed an XSS in the administrator interface via a specially crafted custom rule containing HTML.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee network security manager | < 9.1 | 9.1 |
| mcafee network security manager | = 9.1 | No fix listed |
| mcafee network security manager | = 9.1-update_1 | No fix listed |
| mcafee network security manager | = 9.1-update_2 | No fix listed |
| mcafee network security manager | = 9.1-update_3 | No fix listed |
| mcafee network security manager | = 9.1-update_4 | No fix listed |
| McAfee Network Security Manager (NSM) | >= 9.1, < 9.1 update 5 (9.1.7.77) | 9.1 update 5 (9.1.7.77) |
References
- 108400 vdb-entry
- kc.mcafee.com