CVE-2019-3581CWE-20

McAfee Web Gateway denial of service attack due to Improper Input Validation

High · published January 9, 2019

CVSS v3.0
7.5
EPSS
2%
Percentile
82.9
In the wild
Unconfirmed
What it is

Improper input validation in the proxy component of McAfee Web Gateway 7.8.2.0 and later allows remote attackers to cause a denial of service via a crafted HTTP request parameter.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02268 · 82.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2019-01-09T14:00Z
EPSS history
Timeline
  • 09 JAN 14:00Z
    McAfee Web Gateway denial of service attack due to Improper Input Validation
    cvelistv5