CVE-2015-1619

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the Secure Web Mail Client user interface in McAfee Email Gateway (MEG) 7.6.x before 7.6.3.2, 7.5.x before 75.6, 7.0.x through 7.0.5, 5.6, and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified tokens in Digest messages."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2015-02-17T15:00:00.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10099"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2015-1619", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting (XSS) vulnerability in the Secure Web Mail Client user interface in McAfee Email Gateway (MEG) 7.6.x before 7.6.3.2, 7.5.x before 75.6, 7.0.x through 7.0.5, 5.6, and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified tokens in Digest messages."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://kc.mcafee.com/corporate/index?page=content&id=SB10099", "refsource": "CONFIRM", "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10099"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T04:47:17.384Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10099"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2015-1619", "datePublished": "2015-02-17T15:00:00.000Z", "dateReserved": "2015-02-17T00:00:00.000Z", "dateUpdated": "2024-09-16T23:46:13.680Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cve@mitre.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mcafee:email_gateway:*:*:*:*:*:*:*:*", "matchCriteriaId": "701DB00C-DE5B-4A03-9426-425287582C32", "versionEndIncluding": "5.6", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:email_gateway:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "46F5DE96-C4C2-498A-AD79-82BEC9A7DF5B", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:email_gateway:7.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "75F793C7-F7C5-4B74-B246-0D539F211031", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:email_gateway:7.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "2CF39BED-4C53-4BC4-A6B5-8C01F3ED9E9D", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:email_gateway:7.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "182AFBFB-A4C3-4848-99B3-D70D372346A5", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:email_gateway:7.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "B4CEB591-99B8-4D81-8EAA-62E7C6C47252", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:email_gateway:7.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "EAD2F39E-042B-420D-AED1-6CD95FE663AC", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:email_gateway:7.5:*:*:*:*:*:*:*", "matchCriteriaId": "9177A733-33DE-421B-AFEA-33012D0C5E6E", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:email_gateway:7.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "07C39E32-D8C7-40DB-9FC4-5BE3C68AF08E", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:email_gateway:7.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "8E36C73B-0758-4D76-880D-37C6282A1510", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:email_gateway:7.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "8E13BCBB-DE99-4C17-B2C3-5253B49B3DA1", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:email_gateway:7.5.4:*:*:*:*:*:*:*", "matchCriteriaId": "95D0BE46-6B46-481A-981F-F6D92F274A12", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:email_gateway:7.5.5:*:*:*:*:*:*:*", "matchCriteriaId": "06FC20E1-7C96-4EAD-8358-09500911E35A", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:email_gateway:7.6:*:*:*:*:*:*:*", "matchCriteriaId": "FFD702F1-1034-4601-8091-087ABD185BC0", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:email_gateway:7.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "1032A4FB-7E53-42E2-BEE8-A090990445EA", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:email_gateway:7.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "FB02BDD4-8E02-4821-B7C8-CDDF1B421C7B", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:email_gateway:7.6.3:*:*:*:*:*:*:*", "matchCriteriaId": "F3AC8D63-097E-42A2-B21A-48D1AFB00AEF", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the Secure Web Mail Client user interface in McAfee Email Gateway (MEG) 7.6.x before 7.6.3.2, 7.5.x before 75.6, 7.0.x through 7.0.5, 5.6, and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified tokens in Digest messages."}, {"lang": "es", "value": "Vulnerabilidad de XSS en la interfaz del usuarios de Secure Web Mail Client en McAfee Email Gateway (MEG) 7.6.x anterior a 7.6.3.2, 7.5.x anterior a 75.6, 7.0.x hasta 7.0.5, 5.6, y anteriores permite a usuarios remotos autenticados inyectar secuencias de comandos web arbitrarios o HTML a trav\u00e9s de tokens no especificados en los mensajes Digest."}], "id": "CVE-2015-1619", "lastModified": "2026-06-17T00:22:42.747", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2015-02-17T15:59:10.107", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10099"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10099"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}