CVE-2019-3635

MWG Proxy: Cross-Frame Scripting vulnerability

Medium · published August 14, 2019

CVSS v3.0
4.3
EPSS
1%
Percentile
67.4
In the wild
Unconfirmed
What it is

Exfiltration of Data in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows attackers to obtain sensitive data via crafting a complex webpage that will trigger the Web Gateway to block the user accessing an iframe.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01178 · 67.4th percentile
Published
2019-08-14T16:18Z
EPSS history
Timeline
  • 14 AUG 16:18Z
    MWG Proxy: Cross-Frame Scripting vulnerability
    cvelistv5