Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mcafee mcafee web gateway vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv3
CVE-2020-7292
Inappropriate Encoding for output context vulnerability in McAfee Web Gateway (MWG) before 9.2.1 allows a remote malicious user to cause MWG to return an ambiguous redirect response via getting a user to click on a malicious URL.
Mcafee Web Gateway
NA
CVE-2015-1619
Cross-site scripting (XSS) vulnerability in the Secure Web Mail Client user interface in McAfee Email Gateway (MEG) 7.6.x prior to 7.6.3.2, 7.5.x prior to 75.6, 7.0.x up to and including 7.0.5, 5.6, and previous versions allows remote authenticated users to inject arbitrary web s...
Mcafee Email Gateway 7.6.1
Mcafee Email Gateway 7.6.2
Mcafee Email Gateway 7.6.3
Mcafee Email Gateway 7.5
Mcafee Email Gateway 7.5.1
Mcafee Email Gateway 7.0
Mcafee Email Gateway 7.0.1
Mcafee Email Gateway 7.0.2
Mcafee Email Gateway 7.0.3
Mcafee Email Gateway 7.6
Mcafee Email Gateway 7.5.3
Mcafee Email Gateway 7.5.5
Mcafee Email Gateway 7.0.4
Mcafee Email Gateway
Mcafee Email Gateway 7.5.2
Mcafee Email Gateway 7.5.4
Mcafee Email Gateway 7.0.5
NA
CVE-2014-6064
The Accounts tab in the administrative user interface in McAfee Web Gateway (MWG) prior to 7.3.2.9 and 7.4.x prior to 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors.
Mcafee Web Gateway
NA
CVE-2014-2535
Directory traversal vulnerability in McAfee Web Gateway (MWG) 7.4.x prior to 7.4.1, 7.3.x prior to 7.3.2.6, and 7.2.0.9 and previous versions allows remote authenticated users to read arbitrary files via a crafted request to the web filtering port.
Mcafee Web Gateway
NA
CVE-2012-4580
Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.x prior to 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote malicious users to inject arbitrary web script or HTML via vectors related to the McAf...
Mcafee Email And Web Security 5.0
Mcafee Email And Web Security 5.6
Mcafee Email Gateway 7.0
Mcafee Email And Web Security 5.5
NA
CVE-2012-4581
McAfee Email and Web Security (EWS) 5.x prior to 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not disable the server-side session token upon the closing of the Management Console/Dashboard, which makes it easier for remote malicious ...
Mcafee Email And Web Security 5.6
Mcafee Email And Web Security 5.0
Mcafee Email And Web Security 5.5
Mcafee Email Gateway 7.0
NA
CVE-2012-4583
McAfee Email and Web Security (EWS) 5.x prior to 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to obtain the session tokens of arbitrary users by navigating within the Dashboard.
Mcafee Email And Web Security 5.0
Mcafee Email And Web Security 5.5
Mcafee Email And Web Security 5.6
Mcafee Email Gateway 7.0
NA
CVE-2012-4584
McAfee Email and Web Security (EWS) 5.x prior to 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not properly encrypt system-backup data, which makes it easier for remote authenticated users to obtain sensitive information by reading a ...
Mcafee Email And Web Security 5.0
Mcafee Email Gateway 7.0
Mcafee Email And Web Security 5.5
Mcafee Email And Web Security 5.6
NA
CVE-2012-4597
Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote malicious users to inject arbitrary web script or HTML via vectors related to the McAfee Secu...
Mcafee Email And Web Security 5.5
Mcafee Email And Web Security 5.6
Mcafee Email Gateway 7.0.0
Mcafee Email Gateway 7.0.1
NA
CVE-2012-4582
McAfee Email and Web Security (EWS) 5.x prior to 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to reset the passwords of arbitrary administrative accounts via unspecified vectors.
Mcafee Email And Web Security 5.6
Mcafee Email Gateway 7.0
Mcafee Email And Web Security 5.0
Mcafee Email And Web Security 5.5
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
camera
bypass
CVE-2024-3592
CVE-2024-37383
CVE-2024-24919
CVE-2024-27822
CVE-2024-36788
CVE-2024-36789
man-in-the-middle
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »