Unscored severity · published Mar 18, 2014
CVE-2014-2535
Directory traversal vulnerability in McAfee Web Gateway (MWG) 7.4.x before 7.4.1, 7.3.x before 7.3.2.6, and 7.2.0.9 and earlier allows remote authenticated users to read arbitrary…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Directory traversal vulnerability in McAfee Web Gateway (MWG) 7.4.x before 7.4.1, 7.3.x before 7.3.2.6, and 7.2.0.9 and earlier allows remote authenticated users to read arbitrary files via a crafted request to the web filtering port.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WG
Web Gateway · Mcafee
7.2.0 through 7.2.0.9; 7.3.2 before 7.3.2.6; 7.4.0 before 7.4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2535
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2535
Vendor Advisory
http://secunia.com/advisories/56958
Third Party Advisory
http://www.securityfocus.com/bid/66193
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/91772
Vendor Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10063
More from Web Gateway
7.8
CVE-2021-3156
Sudo Heap-Based Buffer Overflow Vulnerability
9.8
CVE-2019-9169
In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression…
9.8
CVE-2018-18311
Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations
9.8
CVE-2016-4448
Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors
9.6
CVE-2019-3638
Reflected Cross Site Scripting vulnerability in Administrators web console in McAfee Web Gateway (MWG) 7.8.x prior to 7.8.2.13 allows remote attackers to collect sensitive…