CVE-2017-3967

SB10192 - Network Security Management (NSM) - Target influence via framing vulnerability

Medium · published April 4, 2018

CVSS v3.0
6.1
EPSS
1%
Percentile
53.5
In the wild
Unconfirmed
What it is

Target influence via framing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to inject arbitrary web script or HTML via application pages inability to break out of 3rd party HTML frames.

The record
Technical detail
CVSS v3.0
6.1 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00732 · 53.5th percentile
Published
2018-04-04T13:00Z
EPSS history
Timeline
  • 04 APR 13:00Z
    SB10192 - Network Security Management (NSM) - Target influence via framing vulnerability
    cvelistv5