CVE-2017-3964

SB10192 - Network Security Management (NSM) - Reflective Cross-Site Scripting (XSS) vulnerability

Low · published April 4, 2018

CVSS v3.0
3.5
EPSS
1%
Percentile
47.4
In the wild
Unconfirmed
What it is

Reflective Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to inject arbitrary web script or HTML via a URL parameter.

The record
Technical detail
CVSS v3.0
3.5 · LOW
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00594 · 47.4th percentile
Published
2018-04-04T13:00Z
EPSS history
Timeline
  • 04 APR 13:00Z
    SB10192 - Network Security Management (NSM) - Reflective Cross-Site Scripting (XSS) vulnerability
    cvelistv5