CVE-2019-3638

Web Gateway (MWG) - Reflected Cross Site Scripting vulnerability

High · published September 12, 2019

CVSS v3.1
8.1
EPSS
2%
Percentile
79.7
In the wild
Unconfirmed
What it is

Reflected Cross Site Scripting vulnerability in Administrators web console in McAfee Web Gateway (MWG) 7.8.x prior to 7.8.2.13 allows remote attackers to collect sensitive information or execute commands with the MWG administrator's credentials via tricking the administrator to click on a carefully constructed malicious link.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01915 · 79.7th percentile
Published
2019-09-12T15:14Z
EPSS history
Timeline
  • 12 SEP 15:14Z
    Web Gateway (MWG) - Reflected Cross Site Scripting vulnerability
    cvelistv5