NS
Product
Network Security Manager
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 2Medium 12Low 0
Watch
Add Network Security Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-3597 | 9.8 | Mar 26 | Authentication Bypass vulnerability in McAfee Network Security Manager (NSM) 9.1 < 9.1.7.75.2 and 9.2 < 9.2.7.31 (9.2 Update 2) allows unauthenticated users to gain administrator… Affected: 9.1 before 9.1.7.75; 9.2 before 9.2.7.31 |
| CVE-2017-3962 | 9.8 | Jun 12 | Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers… Affected: before 8.2.7.42.2 |
| CVE-2017-3972 | 9.8 | Apr 3 | Infrastructure-based foot printing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to execute arbitrary code via… Affected: before 8.2.7.42.2 |
| CVE-2017-3968 | 9.1 | Jun 13 | Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfee Network Data Loss Prevention (NDLP) before 9.3.4.1.5… Affected: before 8.2.7.42.2 |
| CVE-2017-3960 | 8.8 | Jun 12 | Exploitation of Authorization vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated users to gain elevated… Affected: before 8.2.7.42.2 |
| CVE-2017-3965 | 8.8 | Apr 4 | Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to… Affected: before 8.2.7.42.2 |
| CVE-2017-3971 | 6.5 | Apr 4 | Cryptanalysis vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to view confidential information via insecure use… Affected: before 8.2.7.42.2 |
| CVE-2017-3966 | 6.3 | Apr 4 | Exploitation of session variables, resource IDs and other trusted credentials vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2… Affected: before 8.2.7.42.2 |
| CVE-2017-3967 | 6.1 | Apr 4 | Target influence via framing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to inject arbitrary web… Affected: before 8.2.7.42.2 |
| CVE-2017-3969 | 5.9 | Apr 4 | Abuse of communication channels vulnerability in the server in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows man-in-the-middle attackers to decrypt messages… Affected: before 8.2.7.42.2 |
| CVE-2018-6681 | 5.4 | Jul 17 | Abuse of Functionality vulnerability in the web interface in McAfee Network Security Management (NSM) 9.1.7.11 and earlier allows authenticated users to allow arbitrary HTML code… Affected: through 9.1.7.11 |
| CVE-2017-3961 | 5.4 | May 25 | Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated users to allow arbitrary HTML code… Affected: before 8.2.7.42.2 |
| CVE-2017-3964 | 5.4 | Apr 4 | Reflective Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to inject arbitrary web… Affected: before 8.2.7.42.2 |
| CVE-2021-4038 | 4.8 | Dec 9 | Cross Site Scripting (XSS) vulnerability in McAfee Network Security Manager (NSM) prior to 10.1 Minor 7 allows a remote authenticated administrator to embed a XSS in the… Affected: before 10.1.7.48 |
| CVE-2020-7258 | 4.8 | Mar 18 | Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors Affected: before 9.1.7.80 |
| CVE-2020-7256 | 4.8 | Mar 18 | Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors Affected: before 9.1.7.80 |
| CVE-2019-3602 | 4.8 | May 15 | Cross Site Scripting (XSS) vulnerability in McAfee Network Security Manager (NSM) Prior to 9.1 Update 5 allows an authenticated administrator to embed an XSS in the administrator… Affected: before 9.1; 9.1; 9.1; 9.1; 9.1; 9.1 |
| CVE-2019-3606 | 4.1 | Mar 26 | Data Leakage Attacks vulnerability in the web portal component when in an MDR pair in McAfee Network Security Management (NSM) 9.1 < 9.1.7.75 (Update 4) and 9.2 < 9.2.7.31 Update2… Affected: 9.1 before 9.1.7.75; 9.2 before 9.2.7.31 |
| CVE-2014-2390 | – | Aug 29 | Cross-site request forgery (CSRF) vulnerability in the User Management module in McAfee Network Security Manager (NSM) before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before… Affected: 6.1.15 before 6.1.15.39; 7.1.5 before 7.1.5.15; 7.1.15 before 7.1.15.7; 7.5.5 before 7.5.5.9; 8.1.7 before 8.1.7.3 |
Showing 19