CVE-2018-6681

SB10244 - Network Security Management (NSM) - Abuse of Functionality vulnerability

Medium · published July 17, 2018

CVSS v3.0
5.5
EPSS
0%
Percentile
41.8
In the wild
Unconfirmed
What it is

Abuse of Functionality vulnerability in the web interface in McAfee Network Security Management (NSM) 9.1.7.11 and earlier allows authenticated users to allow arbitrary HTML code to be reflected in the response web page via appliance web interface.

The record
Technical detail
CVSS v3.0
5.5 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00498 · 41.8th percentile
Published
2018-07-17T13:00Z
EPSS history
Timeline
  • 17 JUL 13:00Z
    SB10244 - Network Security Management (NSM) - Abuse of Functionality vulnerability
    cvelistv5