4.3
CVSSv2

CVE-2009-3565

Published: 13/11/2009 Updated: 10/10/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 440
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in intruvert/jsp/module/Login.jsp in McAfee IntruShield Network Security Manager (NSM) prior to 5.1.11.6 allow remote malicious users to inject arbitrary web script or HTML via the (1) iaction or (2) node parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

mcafee intrushield network security manager 5.1.7.73

mcafee intrushield network security manager 5.1.7.7

mcafee intrushield network security manager

Exploits

The McAfee Network Security Manager suffers from a cross site scripting vulnerability ...
source: wwwsecurityfocuscom/bid/37003/info McAfee Network Security Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site ...
Attackers can exploit these issues by enticing an unsuspecting victim into following a malicious URI The following example URIs are available: wwwexamplecom/intruvert/jsp/module/Loginjsp?password=&Login%2bID=&node=&iaction=precreatefcb14"><script>alert('XSS')</script>8b3283a1e57 wwwexamplecom/int ...