Search vulnerabilities

Results 4

Export CSV
CVE-2019-3581

McAfee Web Gateway denial of service attack due to Improper Input Validation

Improper input validation in the proxy component of McAfee Web Gateway 7.8.2.0 and later allows remote attackers to cause a denial of service via a crafted HTTP request parameter.

CVSS 3.0 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
CVE-2018-6678

McAfee Web Gateway (MWG) - Configuration/Environment manipulation vulnerability

Configuration/Environment manipulation vulnerability in the administrative interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to execute arbitrary commands via unspecified vectors.

CVSS 3.1 · 9.1 Critical EPSS 1.2% KEV · Not listed
Vendors
CVE-2018-6677

McAfee Web Gateway (MWG) - Directory Traversal vulnerability

Directory Traversal vulnerability in the administrative user interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to gain elevated privileges via unspecified vectors.

CVSS 3.1 · 9.1 Critical EPSS 2.1% KEV · Not listed
Vendors
CVE-2018-6667

McAfee Web Gateway - Authentication Bypass vulnerability

Authentication Bypass vulnerability in the administrative user interface in McAfee Web Gateway 7.8.1.0 through 7.8.1.5 allows remote attackers to execute arbitrary code via Java management extensions (JMX).

CVSS 3.0 · 10 Critical EPSS 3.5% KEV · Not listed
Vendors