Vulnerabilities (CVE)

Filtered by vendor Mcafee Subscribe
Filtered by product Network Security Manager
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-3960 1 Mcafee 1 Network Security Manager 2019-10-09 6.5 MEDIUM 8.8 HIGH
Exploitation of Authorization vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated users to gain elevated privileges via a crafted HTTP request parameter.
CVE-2017-3965 1 Mcafee 1 Network Security Manager 2019-10-09 6.8 MEDIUM 8.8 HIGH
Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to perform unauthorized tasks such as retrieving internal system information or manipulating the database via specially crafted URLs.