WG
Product
Web Gateway
On CISA KEVExploited in the wild
41
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 17Medium 16Low 0
Watch
Add Web Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-3635 | 6.5 | Aug 14 | Exfiltration of Data in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows attackers to obtain sensitive data via crafting a complex webpage that will trigger the Web… Affected: 7.8.2.0 before 7.8.2.12 |
| CVE-2019-9516 | 6.5 | Aug 13 | Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service Affected: 7.7.2.0 before 7.7.2.24; 7.8.2.0 before 7.8.2.13; 8.1.0 before 8.2.0 |
| CVE-2022-1254 | 6.1 | Apr 20 | A URL redirection vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.9, 9.x prior to 9.2.20, 8.x prior to 8.2.27, and 7.x prior to 7.8.2.31, and controlled release… Affected: 7.0.0 before 7.8.2.31; 8.0.0 before 8.2.27; 9.0.0 before 9.2.20; 10.0.0 before 10.2.9; 11.0.0 before 11.1.3 |
| CVE-2021-3449 | 5.9 | Mar 25 | NULL pointer deref in signature_algorithms processing Affected: 8.2.19; 9.2.10; 10.1.1 |
| CVE-2019-1559 | 5.9 | Feb 27 | 0-byte record padding oracle Affected: 7.0.0 before 9.0.0 |
| CVE-2020-7297 | 5.7 | Sep 16 | Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected dashboard data via improper access… Affected: 7.8.0 before 7.8.2.22; 8.2.0 before 8.2.9; 9.0.0 before 9.2.1 |
| CVE-2020-7296 | 5.7 | Sep 15 | Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected configuration files via improper access… Affected: 7.8.0 before 7.8.2.23; 8.2.0 before 8.2.11; 9.0.0 before 9.2.3 |
| CVE-2019-6454 | 5.5 | Mar 17 | An issue was discovered in sd-bus in systemd 239 Affected: before 7.7.2.21; 7.8.0 before 7.8.2.8; 8.0.0 before 8.1.1 |
| CVE-2016-1839 | 5.5 | May 20 | The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers… Affected: 7.5.0.0 through 7.5.2.10; 7.6.0.0 through 7.6.2.3 |
| CVE-2016-1838 | 5.5 | May 20 | The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows… Affected: 7.5.0.0 through 7.5.2.10; 7.6.0.0 through 7.6.2.3 |
| CVE-2016-1837 | 5.5 | May 20 | Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X… Affected: 7.5.0.0 through 7.5.2.10; 7.6.0.0 through 7.6.2.3 |
| CVE-2016-1836 | 5.5 | May 20 | Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS… Affected: 7.5.0.0 through 7.5.2.10; 7.6.0.0 through 7.6.2.3 |
| CVE-2016-1833 | 5.5 | May 20 | The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers… Affected: 7.5.0.0 through 7.5.2.10; after 7.6.0.0 through 7.6.2.3 |
| CVE-2020-7295 | 4.6 | Sep 15 | Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access… Affected: 7.8.0 before 7.8.2.23; 8.2.0 before 8.2.11; 9.0.0 before 9.2.3 |
| CVE-2020-7294 | 4.6 | Sep 15 | Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected files via improper access… Affected: 7.8.0 before 7.8.2.23; 8.2.0 before 8.2.11; 9.0.0 before 9.2.3 |
| CVE-2020-7292 | 4.3 | Jul 15 | Inappropriate Encoding for output context vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows a remote attacker to cause MWG to return an ambiguous redirect response… Affected: 7.8.0 before 7.8.2.22; 8.2.0 before 8.2.9; 9.0.0 before 9.2.1 |
Showing 16