Vulnerabilities (CVE)

Filtered by vendor Mcafee Subscribe
Filtered by product Email Gateway
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-7268 1 Mcafee 1 Email Gateway 2022-01-06 4.0 MEDIUM 4.3 MEDIUM
Path Traversal vulnerability in McAfee McAfee Email Gateway (MEG) prior to 7.6.406 allows remote attackers to traverse the file system to access files or directories that are outside of the restricted directory via external input to construct a path name that should be within a restricted directory.
CVE-2016-8005 1 Mcafee 1 Email Gateway 2017-03-30 4.0 MEDIUM 6.5 MEDIUM
File extension filtering vulnerability in Intel Security McAfee Email Gateway (MEG) before 7.6.404h1128596 allows attackers to fail to identify the file name properly via scanning an email with a forged attached filename that uses a null byte within the filename extension.
CVE-2016-3969 1 Mcafee 1 Email Gateway 2016-05-19 4.3 MEDIUM 6.1 MEDIUM
Cross-site scripting (XSS) vulnerability in McAfee Email Gateway (MEG) 7.6.x before 7.6.404, when File Filtering is enabled with the action set to ESERVICES:REPLACE, allows remote attackers to inject arbitrary web script or HTML via an attachment in a blocked email.