WG
Product
Web Gateway
On CISA KEVExploited in the wild
41
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 17Medium 16Low 0
Watch
Add Web Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3156 In wildKEV | 7.8 | Jan 26 | Sudo Heap-Based Buffer Overflow Vulnerability Affected: 8.2.17; 9.2.8; 10.0.4 |
| CVE-2021-23885 | 8.8 | Feb 17 | Privilege escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.8 allows an authenticated user to gain elevated privileges through the User Interface and execute… Affected: before 8.2.17; 9.2 before 9.2.8; 10.0 before 10.0.4 |
| CVE-2016-1762 | 8.1 | Mar 24 | The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document Affected: through 7.5.2.10; after 7.5.2.11 through 7.6.2.3 |
| CVE-2017-1000366 | 7.8 | Jun 19 | glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code… Affected: through 7.6.2.14; 7.7.0.0 through 7.7.2.2 |
| CVE-2016-1840 | 7.8 | May 20 | Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS… Affected: 7.5.0.0 through 7.5.2.10; 7.6.0.0 through 7.6.2.3 |
| CVE-2016-1834 | 7.8 | May 20 | Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1,… Affected: 7.5.0.0 through 7.5.2.10; 7.6.0.0 through 7.6.2.3 |
| CVE-2019-3644 | 7.5 | Sep 11 | McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service Affected: 7.7.2.0 before 7.7.2.24; 7.8.2 before 7.8.2.13; 8.0.0 before 8.2.0 |
| CVE-2019-3643 | 7.5 | Sep 11 | McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, potentially leading to a denial of service Affected: 7.7.2.0 before 7.7.2.24; 7.8.2 before 7.8.2.13; 8.0.0 before 8.2.0 |
| CVE-2019-9518 | 7.5 | Aug 13 | Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service Affected: 7.7.2.0 before 7.7.2.24; 7.8.2.0 before 7.8.2.13; 8.1.0 before 8.2.0 |
| CVE-2019-9517 | 7.5 | Aug 13 | Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service Affected: 7.7.2.0 before 7.7.2.24; 7.8.2.0 before 7.8.2.13; 8.1.0 before 8.2.0 |
| CVE-2019-9515 | 7.5 | Aug 13 | Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service Affected: 7.7.2.0 before 7.7.2.24; 7.8.2.0 before 7.8.2.13; 8.1.0 before 8.2.0 |
| CVE-2019-9514 | 7.5 | Aug 13 | Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service Affected: 7.7.2.0 before 7.7.2.24; 7.8.2.0 before 7.8.2.13; 8.1.0 before 8.2.0 |
| CVE-2019-9513 | 7.5 | Aug 13 | Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service Affected: 7.7.2.0 before 7.7.2.24; 7.8.2.0 before 7.8.2.13; 8.1.0 before 8.2.0 |
| CVE-2019-9511 | 7.5 | Aug 13 | Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service Affected: 7.7.2.0 before 7.7.2.24; 7.8.2.0 before 7.8.2.13; 8.1.0 before 8.2.0 |
| CVE-2016-4447 | 7.5 | Jun 9 | The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application… Affected: 7.5.0.0 through 7.5.2.10; 7.6.0.0 through 7.6.2.3 |
| CVE-2021-3450 | 7.4 | Mar 25 | CA certificate check bypass with X509_V_FLAG_X509_STRICT Affected: 8.2.19; 9.2.10; 10.1.1 |
| CVE-2019-3639 | 7.1 | Aug 14 | Clickjack vulnerability in Adminstrator web console in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows remote attackers to conduct clickjacking attacks via a crafted web… Affected: 7.8.2.0 before 7.8.2.12 |
Showing 17