Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: McAfee Network Security Management (NSM) 8.2.7.42.2 Clear all filters
TI-2017-03012 CVE-2017-3971 · GHSA-cr6f-25f8-7583

SB10192 - Network Security Management (NSM) - Cryptanalysis vulnerability

Priority LOW 35

Cryptanalysis vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to view confidential information via insecure use of RC4 encryption cyphers.

CVSS 3.0HIGH 8.2 Network Low privileges User interaction EPSS 0.00311 Published 2018-04-04 Fixed in 8.2.7.42.2 CWE-326
TI-2017-03011 CVE-2017-3969 · GHSA-f28g-v75h-r3g8

SB10192 - Network Security Management (NSM) - Abuse of communication channels vulnerability

Priority LOW 37

Abuse of communication channels vulnerability in the server in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows man-in-the-middle attackers to decrypt messages via an inadequate implementation of SSL.

CVSS 3.0HIGH 8.2 Network Low privileges User interaction EPSS 0.00799 Published 2018-04-04 Fixed in 8.2.7.42.2 CWE-417
TI-2017-03009 CVE-2017-3967 · GHSA-v66p-hmjm-wrxm

SB10192 - Network Security Management (NSM) - Target influence via framing vulnerability

Priority LOW 29

Target influence via framing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to inject arbitrary web script or HTML via application pages inability…

CVSS 3.0MEDIUM 6.1 Network High privileges User interaction EPSS 0.00732 Published 2018-04-04 Fixed in 8.2.7.42.2 CWE-94
TI-2017-03008 CVE-2017-3966 · GHSA-p7mx-frqj-j9hq

Insufficient session expiration in McAfee Network Security Management

Priority LOW 30

Exploitation of session variables, resource IDs and other trusted credentials vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to exploit or harm a…

CVSS 3.0MEDIUM 6.4 Network High privileges User interaction EPSS 0.00672 Published 2018-04-04 Fixed in 8.2.7.42.2 CWE-613
TI-2017-03007 CVE-2017-3965 · GHSA-346h-rrp2-cwwg

SB10192 - Network Security Management (NSM) - Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerability

Priority LOW 39

Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to perform unauthorized tasks such as retrie…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00538 Published 2018-04-04 Fixed in 8.2.7.42.2 CWE-352
TI-2017-03006 CVE-2017-3964 · GHSA-4w4x-65f4-79g2

SB10192 - Network Security Management (NSM) - Reflective Cross-Site Scripting (XSS) vulnerability

Priority LOW 25

Reflective Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to inject arbitrary web script or HTML via a URL parameter.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00594 Published 2018-04-04 Fixed in 8.2.7.42.2 CWE-79