Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mcafee email gateway 7.6 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2016-3969
Cross-site scripting (XSS) vulnerability in McAfee Email Gateway (MEG) 7.6.x prior to 7.6.404, when File Filtering is enabled with the action set to ESERVICES:REPLACE, allows remote malicious users to inject arbitrary web script or HTML via an attachment in a blocked email.
Mcafee Email Gateway 7.6.4Mcafee Email Gateway 7.6.3Mcafee Email Gateway 7.6.2Mcafee Email Gateway 7.6.1Mcafee Email Gateway 7.6
3.5
CVSSv2
CVE-2015-1619
Cross-site scripting (XSS) vulnerability in the Secure Web Mail Client user interface in McAfee Email Gateway (MEG) 7.6.x prior to 7.6.3.2, 7.5.x prior to 75.6, 7.0.x up to and including 7.0.5, 5.6, and previous versions allows remote authenticated users to inject arbitrary web s...
Mcafee Email Gateway 7.6.1Mcafee Email Gateway 7.6.2Mcafee Email Gateway 7.6.3Mcafee Email Gateway 7.5Mcafee Email Gateway 7.5.1Mcafee Email Gateway 7.0Mcafee Email Gateway 7.0.1Mcafee Email Gateway 7.0.2Mcafee Email Gateway 7.0.3Mcafee Email Gateway 7.6Mcafee Email Gateway 7.5.3Mcafee Email Gateway 7.5.5Mcafee Email Gateway 7.0.4Mcafee Email GatewayMcafee Email Gateway 7.5.2Mcafee Email Gateway 7.5.4Mcafee Email Gateway 7.0.5
6.5
CVSSv2
CVE-2013-7092
Multiple SQL injection vulnerabilities in /admin/cgi-bin/rpc/doReport/18 in McAfee Email Gateway 7.6 allow remote authenticated users to execute arbitrary SQL commands via the (1) events_col, (2) event_id, (3) reason, (4) events_order, (5) emailstatus_order, or (6) emailstatus_co...
Mcafee Email Gateway 7.6
9
CVSSv2
CVE-2013-7103
McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the value attribute in a (1) TestFile XML element or the (2) hostname. NOTE: this issue can be combined with CVE-2013-7092 to allow remote malicious users...
Mcafee Email Gateway 7.6
9
CVSSv2
CVE-2013-7104
McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands by specifying them in the value attribute in a (1) Command or (2) Script XML element. NOTE: this issue can be combined with CVE-2013-7092 to allow remote malicious users to execute c...
Mcafee Email Gateway 7.6
9.3
CVSSv2
CVE-2021-44228
Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...
Apache Log4j 2.0Apache Log4jSiemens Sppa-t3000 Ses3000 FirmwareSiemens Logo\\! Soft ComfortSiemens Spectrum Power 4 4.70Siemens Spectrum Power 4Siemens Siveillance Control ProSiemens Energyip Prepay 3.7Siemens Energyip Prepay 3.8Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Siveillance CommandSiemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Siemens Head-end System Universal Device Integration SystemSiemens Gma-managerSiemens Energyip 8.5Siemens Energyip 8.6Siemens Energyip 8.7Siemens Energyip 9.0Siemens Energy Engage 3.1Siemens E-car Operation Center
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook