CVE-2019-3638

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
9.6CRITICAL
EPSS
1.0%
top 22.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Mcafee WEB Gateway(mwg)Mcafee WEB Gateway
Timeline
PublishedSep 12
Latest updateMay 24

Description

Reflected Cross Site Scripting vulnerability in Administrators web console in McAfee Web Gateway (MWG) 7.8.x prior to 7.8.2.13 allows remote attackers to collect sensitive information or execute commands with the MWG administrator's credentials via tricking the administrator to click on a carefully constructed malicious link.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:NExploitability: 2.8 | Impact: 5.2

Affected Packages2 packages

▶NVDmcafee/web_gateway7.8.2 — 7.8.2.13+1
▶CVEListV5mcafee/web_gateway(mwg)7.8.x — 7.8.2.13

🔴Vulnerability Details

2
GHSA
GHSA-32j9-3fgh-fpcp: Reflected Cross Site Scripting vulnerability in Administrators web console in McAfee Web Gateway (MWG) 7↗2022-05-24
▶
CVEList
Web Gateway (MWG) - Reflected Cross Site Scripting vulnerability↗2019-09-12
▶