Vulnerabilities

TI-2012-03434 CVE-2012-4014 · GHSA-c7rr-v5hf-v49r

Unspecified vulnerability in McAfee Email Anti-virus (formerly WebShield SMTP) allows…

LOW 38

Unspecified vulnerability in McAfee Email Anti-virus (formerly WebShield SMTP) allows remote attackers to cause a denial of service via unknown vectors.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01895 Published 2012-09-25 No fix listed

TI-2012-03937 CVE-2012-4597 · GHSA-56q8-wv5h-r272

Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.5…

LOW 22

Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to inject arbitrary web…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01148 Published 2012-08-22 No fix listed CWE-79

TI-2012-03935 CVE-2012-4595 · GHSA-w5p3-vhf8-9h55

McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and…

LOW 38

McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to bypass authentication and obtain an admin session ID via unspeci…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02525 Published 2012-08-22 No fix listed CWE-287

TI-2012-03926 CVE-2012-4586 · GHSA-92cx-5wrj-5pgx

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and…

LOW 19

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, accesses files with the privileges of the root user, which allows remote authenticated…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00915 Published 2012-08-22 No fix listed CWE-264

TI-2012-03925 CVE-2012-4585 · GHSA-5jf7-wfpr-3mrj

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and…

LOW 21

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to read arbitrary files via a crafted URL.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.00937 Published 2012-08-22 No fix listed CWE-264

TI-2012-03924 CVE-2012-4584 · GHSA-fr8v-wj33-r9jw

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and…

LOW 18

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not properly encrypt system-backup data, which makes it easier for remote authent…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00852 Published 2012-08-22 No fix listed CWE-310

TI-2012-03923 CVE-2012-4583 · GHSA-gw82-2395-v94j

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and…

LOW 21

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to obtain the session tokens of arbitrary users by n…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.00937 Published 2012-08-22 No fix listed CWE-200

TI-2012-03922 CVE-2012-4582 · GHSA-jx35-69vw-mrr7

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and…

LOW 24

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to reset the passwords of arbitrary administrative a…

CVSS 2.0MEDIUM 4.9 Network Low privileges Interaction — EPSS 0.00852 Published 2012-08-22 No fix listed CWE-264

TI-2012-03921 CVE-2012-4581 · GHSA-wpp8-fp59-g7vc

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and…

LOW 32

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not disable the server-side session token upon the closing of the Management Cons…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01209 Published 2012-08-22 No fix listed CWE-287

TI-2012-03920 CVE-2012-4580 · GHSA-m5fq-8mpw-4wc6

Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.x…

LOW 23

Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote attackers to inject arbitrar…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01384 Published 2012-08-22 No fix listed CWE-79

Vulnerabilities

Filters