EG
Product
Email Gateway
20
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 3Low 0
Watch
Add Email Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-8005 | 6.5 | Mar 14 | File extension filtering vulnerability in Intel Security McAfee Email Gateway (MEG) before 7.6.404h1128596 allows attackers to fail to identify the file name properly via scanning… Affected: through 7.6.401 |
| CVE-2016-3969 | 6.1 | Apr 6 | Cross-site scripting (XSS) vulnerability in McAfee Email Gateway (MEG) 7.6.x before 7.6.404, when File Filtering is enabled with the action set to ESERVICES:REPLACE, allows remote… Affected: 7.6; 7.6.1; 7.6.2; 7.6.3; 7.6.4 |
| CVE-2020-7268 | 4.3 | Sep 16 | Path Traversal vulnerability in McAfee McAfee Email Gateway (MEG) prior to 7.6.406 allows remote attackers to traverse the file system to access files or directories that are… Affected: before 7.6.406 |
| CVE-2015-1619 | – | Feb 17 | Cross-site scripting (XSS) vulnerability in the Secure Web Mail Client user interface in McAfee Email Gateway (MEG) 7.6.x before 7.6.3.2, 7.5.x before 75.6, 7.0.x through 7.0.5,… Affected: through 5.6; 7.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; +11 more |
| CVE-2013-7104 | – | Dec 14 | McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands by specifying them in the value attribute in a (1) Command or (2) Script XML… Affected: 7.6 |
| CVE-2013-7103 | – | Dec 14 | McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the value attribute in a (1) TestFile XML element or… Affected: 7.6 |
| CVE-2013-7092 | – | Dec 13 | Multiple SQL injection vulnerabilities in /admin/cgi-bin/rpc/doReport/18 in McAfee Email Gateway 7.6 allow remote authenticated users to execute arbitrary SQL commands via the (1)… Affected: 7.6 |
| CVE-2013-6349 | – | Nov 2 | McAfee Email Gateway (MEG) 7.0 before 7.0.4 and 7.5 before 7.5.1 allows remote authenticated users to execute arbitrary commands via unspecified vectors Affected: 7.0.1; 7.0.2; 7.0.3; 7.5 |
| CVE-2012-4597 | – | Aug 22 | Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows… Affected: 7.0.0; 7.0.1 |
| CVE-2012-4596 | – | Aug 22 | Directory traversal vulnerability in McAfee Email Gateway (MEG) 7.0.0 and 7.0.1 allows remote authenticated users to bypass intended access restrictions and download arbitrary… Affected: 7.0.0; 7.0.1 |
| CVE-2012-4595 | – | Aug 22 | McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to bypass authentication… Affected: 7.0.0; 7.0.1 |
| CVE-2012-4586 | – | Aug 22 | McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, accesses files with the privileges of the… Affected: 7.0 |
| CVE-2012-4585 | – | Aug 22 | McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to read… Affected: 7.0 |
| CVE-2012-4584 | – | Aug 22 | McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not properly encrypt system-backup data,… Affected: 7.0 |
| CVE-2012-4583 | – | Aug 22 | McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to obtain… Affected: 7.0 |
| CVE-2012-4582 | – | Aug 22 | McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to reset… Affected: 7.0 |
| CVE-2012-4581 | – | Aug 22 | McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not disable the server-side session… Affected: 7.0 |
| CVE-2012-4580 | – | Aug 22 | Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1,… Affected: 7.0 |
| CVE-2010-2116 | – | May 28 | The web interface in McAfee Email Gateway (formerly IronMail) 6.7.1 allows remote authenticated users, with only Read privileges, to gain Write privileges to modify configuration… Affected: 6.7.1 |
| CVE-2009-1348 | – | Apr 30 | The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for… Affected: All versions, or not specified |
Showing 20