Mcafee Llc Mcafee Web Gateway vulnerabilities

5 known vulnerabilities affecting mcafee_llc/mcafee_web_gateway.

Total CVEs

5

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH4MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2021-23885HIGHCVSS 8.8≥ unspecified, < 9.2.82021-02-17

CVE-2021-23885 [HIGH] CWE-269 CVE-2021-23885: Privilege escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.8 allows an authenticate Privilege escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.8 allows an authenticated user to gain elevated privileges through the User Interface and execute commands on the appliance via incorrect improper neutralization of user input in the troubleshooting page.

CVE-2019-3644HIGHCVSS 7.5≥ 7.8.2.13, < 7.8.2.132019-09-11

CVE-2019-3644 [HIGH] CVE-2019-3644: McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-201 McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service. This affects the scanning proxies.

CVE-2019-3643HIGHCVSS 7.5≥ 7.8.2.13, < 7.8.2.132019-09-11

CVE-2019-3643 [HIGH] CVE-2019-3643: McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-201 McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, potentially leading to a denial of service. This affects the scanning proxies.

CVE-2019-3639HIGHCVSS 7.1≥ 7.8.2.x, < 7.8.2.122019-08-14

CVE-2019-3639 [HIGH] CWE-1021 CVE-2019-3639: Clickjack vulnerability in Adminstrator web console in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8 Clickjack vulnerability in Adminstrator web console in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows remote attackers to conduct clickjacking attacks via a crafted web page that contains an iframe via does not send an X-Frame-Options HTTP header.

CVE-2019-3635MEDIUMCVSS 6.5≥ 7.8.2.x, < 7.8.2.122019-08-14

CVE-2019-3635 [MEDIUM] CVE-2019-3635: Exfiltration of Data in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows attackers to obtai Exfiltration of Data in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows attackers to obtain sensitive data via crafting a complex webpage that will trigger the Web Gateway to block the user accessing an iframe.