Mcafee Network Security Management (Nsm)
16 CVEs affecting Mcafee Network Security Management (Nsm). Latest disclosed: 2021-01-05. Critical: 0, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-3965 | High | 8.8 | 2018-04-04 | Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows… |
CVE-2020-7284 | High | 8.6 | 2020-07-03 | Exposure of Sensitive Information in McAfee Network Security Management (NSM) prior to 10.1.7.7 allows local users to gain unauthorised access to the root acco… |
CVE-2017-3972 | High | 8.3 | 2018-04-03 | Infrastructure-based foot printing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to execute… |
CVE-2017-3971 | High | 8.2 | 2018-04-04 | Cryptanalysis vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to view confidential informatio… |
CVE-2017-3969 | High | 8.2 | 2018-04-04 | Abuse of communication channels vulnerability in the server in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows man-in-the-middle attackers to… |
CVE-2017-3968 | High | 7.5 | 2018-06-13 | Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfee Network Data Loss Prevention (NDLP) b… |
CVE-2020-7336 | Medium | 6.6 | 2021-01-05 | Cross Site Request Forgery vulnerability in McAfee Network Security Management (NSM) prior to 10.1.7.35 and NSM 9.x prior to 9.2.9.55 may allow an attacker to… |
CVE-2017-3966 | Medium | 6.4 | 2018-04-04 | Exploitation of session variables, resource IDs and other trusted credentials vulnerability in the web interface in McAfee Network Security Management (NSM) be… |
CVE-2017-3967 | Medium | 6.1 | 2018-04-04 | Target influence via framing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to inject… |
CVE-2017-3960 | Medium | 5.9 | 2018-06-12 | Exploitation of Authorization vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated users to ga… |
CVE-2017-3962 | Medium | 5.6 | 2018-06-12 | Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management (NSM) before 8.2.7.42… |
CVE-2018-6681 | Medium | 5.4 | 2018-07-17 | Abuse of Functionality vulnerability in the web interface in McAfee Network Security Management (NSM) 9.1.7.11 and earlier allows authenticated users to allow… |
CVE-2020-7258 | Medium | 4.8 | 2020-03-18 | Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via… |
CVE-2020-7256 | Medium | 4.8 | 2020-03-18 | Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via… |
CVE-2017-3961 | Low | 3.5 | 2018-05-25 | Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated users to allow… |
CVE-2017-3964 | Low | 3.5 | 2018-04-04 | Reflective Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to inje… |