WG
Product
Web Gateway
On CISA KEVExploited in the wild
41
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 17Medium 16Low 0
Watch
Add Web Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-9169 | 9.8 | Feb 26 | In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression… Affected: 7.7.2.0 before 7.7.2.21; 7.8.2.0 before 7.8.2.8; 8.0.0 before 8.1.1 |
| CVE-2018-18311 | 9.8 | Dec 7 | Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations Affected: 7.7.2 before 7.7.2.21; 7.8.2 before 7.8.2.8; 8.0.0 before 8.1.1 |
| CVE-2016-4448 | 9.8 | Jun 9 | Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors Affected: through 7.5.2.10; 7.6.0.0 through 7.6.2.3 |
| CVE-2019-3638 | 9.6 | Sep 12 | Reflected Cross Site Scripting vulnerability in Administrators web console in McAfee Web Gateway (MWG) 7.8.x prior to 7.8.2.13 allows remote attackers to collect sensitive… Affected: 7.8.2 before 7.8.2.13; 8.0.0 before 8.2.0 |
| CVE-2020-7293 | 9.0 | Sep 15 | Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password… Affected: 7.8.0 before 7.8.2.23; 8.2.0 before 8.2.11; 9.0.0 before 9.2.3 |
Showing 5