Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2014-2587

SQL injection vulnerability in jsp/reports/ReportsAudit.jsp in McAfee Asset Manager 6.6 allows remote authenticated users to execute arbitrary SQL commands via the username of an audit report (aka user parameter).

CVSS 2.0 · 6.5 Medium EPSS 3.1% KEV · Not listed
Vendors
Mcafee
Products
Asset Manager
CVE-2014-2588

Directory traversal vulnerability in servlet/downloadReport in McAfee Asset Manager 6.6 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the reportFileName parameter.

CVSS 2.0 · 4.0 Medium EPSS 7.3% KEV · Not listed
Vendors
Mcafee
Products
Asset Manager