Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mcafee network security management vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2020-7336
Cross Site Request Forgery vulnerability in McAfee Network Security Management (NSM) before 10.1.7.35 and NSM 9.x before 9.2.9.55 may allow an malicious user to change the configuration of the Network Security Manager via a carefully crafted HTTP request.
Mcafee Network Security Management
7.2
CVSSv2
CVE-2020-7284
Exposure of Sensitive Information in McAfee Network Security Management (NSM) before 10.1.7.7 allows local users to gain unauthorised access to the root account via execution of carefully crafted commands from the restricted command line interface (CLI).
Mcafee Network Security Management
3.5
CVSSv2
CVE-2020-7256
Cross site scripting vulnerability in McAfee Network Security Management (NSM) before 9.1 update 6 Mar 2020 Update allows malicious users to unspecified impact via unspecified vectors.
Mcafee Network Security Manager
3.5
CVSSv2
CVE-2020-7258
Cross site scripting vulnerability in McAfee Network Security Management (NSM) before 9.1 update 6 Mar 2020 Update allows malicious users to unspecified impact via unspecified vectors.
Mcafee Network Security Manager
4
CVSSv2
CVE-2017-3971
Cryptanalysis vulnerability in the web interface in McAfee Network Security Management (NSM) prior to 8.2.7.42.2 allows malicious users to view confidential information via insecure use of RC4 encryption cyphers.
Mcafee Network Security Manager
5
CVSSv2
CVE-2017-3962
Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management (NSM) prior to 8.2.7.42.2 allows malicious users to crack user passwords via unsalted hashes.
Mcafee Network Security Manager
6.5
CVSSv2
CVE-2017-3960
Exploitation of Authorization vulnerability in the web interface in McAfee Network Security Management (NSM) prior to 8.2.7.42.2 allows authenticated users to gain elevated privileges via a crafted HTTP request parameter.
Mcafee Network Security Manager
3.5
CVSSv2
CVE-2017-3964
Reflective Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) prior to 8.2.7.42.2 allows malicious users to inject arbitrary web script or HTML via a URL parameter.
Mcafee Network Security Manager
4.3
CVSSv2
CVE-2017-3969
Abuse of communication channels vulnerability in the server in McAfee Network Security Management (NSM) prior to 8.2.7.42.2 allows man-in-the-middle malicious users to decrypt messages via an inadequate implementation of SSL.
Mcafee Network Security Manager
7.5
CVSSv2
CVE-2017-3972
Infrastructure-based foot printing vulnerability in the web interface in McAfee Network Security Management (NSM) prior to 8.2.7.42.2 allows malicious users to execute arbitrary code via the server banner leaking potentially sensitive or security relevant information.
Mcafee Network Security Manager
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4761
command injection
CVE-2024-3676
IDOR
CVE-2024-30039
CVE-2024-32113
CVE-2024-30049
CVE-2024-4776
SQL injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
NEXT »