VendorsMcAfeenetwork_security_managerall versions
Vulnerabilities

McAfee Network Security Manager

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

19CVEs
CVE-2017-3972
SB10192 - Network Security Management (NSM) - Infrastructure-based foot printing vulnerability
Published 2018-04-03 · Modified
9.8EPSS 0.015
CVE-2019-3597
Authentication bypass in McAfee Network Security Manager 9.x
Published 2019-03-26 · Modified
9.8EPSS 0.011
CVE-2017-3962
McAfee Network Security Management (NSM) - Password recovery exploitation vulnerability
Published 2018-06-12 · Modified
9.8EPSS 0.004
CVE-2017-3968
McAfee Network Security Management (NSM) and Network Data Loss Prevention (NDLP)- Password recovery exploitation vulnerability
Published 2018-06-13 · Modified
9.1EPSS 0.015
CVE-2017-3960
McAfee Network Security Management (NSM) - Exploitation of Authorization vulnerability
Published 2018-06-12 · Modified
8.8EPSS 0.009
CVE-2017-3965
SB10192 - Network Security Management (NSM) - Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerability
Published 2018-04-04 · Modified
8.8EPSS 0.005
CVE-2017-3969
SB10192 - Network Security Management (NSM) - Abuse of communication channels vulnerability
Published 2018-04-04 · Modified
8.2EPSS 0.008
CVE-2017-3971
SB10192 - Network Security Management (NSM) - Cryptanalysis vulnerability
Published 2018-04-04 · Modified
8.2EPSS 0.003
CVE-2019-3606
Data leakage when in an MDR pair by McAfee Network Security Manager 9.x
Published 2019-03-26 · Modified
7.7EPSS 0.002
CVE-2014-2390
Cross-site request forgery (CSRF) vulnerability in the User Management module in McAfee Network Security Manager (NSM) before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before 7.1.15.7, 7.5.x before 7.5.5.9, and 8.x before 8.1.7.3 allows remote attackers to hijack the authentication of users for requests that modify user accounts via unspecified vectors.
Published 2014-08-29 · Modified
6.8EPSS 0.007
CVE-2017-3966
SB10192 - Network Security Management (NSM) - Exploitation of session variables, resource IDs and other trusted credentials vulnerability
Published 2018-04-04 · Modified
6.5EPSS 0.007
CVE-2017-3967
SB10192 - Network Security Management (NSM) - Target influence via framing vulnerability
Published 2018-04-04 · Modified
6.1EPSS 0.007
CVE-2018-6681
SB10244 - Network Security Management (NSM) - Abuse of Functionality vulnerability
Published 2018-07-17 · Modified
5.5EPSS 0.005
CVE-2017-3961
SB10192 - Network Security Management (NSM) - Cross-Site Scripting (XSS) vulnerability
Published 2018-05-25 · Modified
5.4EPSS 0.006
CVE-2017-3964
SB10192 - Network Security Management (NSM) - Reflective Cross-Site Scripting (XSS) vulnerability
Published 2018-04-04 · Modified
5.4EPSS 0.006
CVE-2019-3602
Cross site scripting vulnerability in McAfee NSM impacting authenticated users
Published 2019-05-15 · Modified
4.8EPSS 0.006
CVE-2021-4038
NSM vulnerable to XSS
Published 2021-12-09 · Modified
4.8EPSS 0.006
CVE-2020-7256
Network Security Management (NSM) - Cross site scripting vulnerability
Published 2020-03-18 · Modified
4.8EPSS 0.005
CVE-2020-7258
Network Security Management (NSM) - Cross site scripting vulnerability
Published 2020-03-18 · Modified
4.8EPSS 0.005