Cloud Single Sign ON vulnerabilities | LiveThreat CVE Feed

Product

Cloud Single Sign ON

by Mcafee · last CVE Mar 24, 2014

CVEs

On KEV

–

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 0Low 0

Severity

Exploitation

Watch

Add Cloud Single Sign ON to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2014-2586	–	3%	Mar 24	Cross-site scripting (XSS) vulnerability in the login audit form in McAfee Cloud Single Sign On (SSO) allows remote attackers to inject arbitrary web script or HTML via a crafted… Affected: All versions, or not specified
CVE-2014-2536	–	2%	Mar 18	Directory traversal vulnerability in McAfee Cloud Identity Manager 3.0, 3.1, and 3.5.1, McAfee Cloud Single Sign On (MCSSO) before 4.0.1, and Intel Expressway Cloud Access 360-SSO… Affected: 4.0.0