CVE-2019-3639

MWG UI: Cross-Frame Scripting vulnerability

High · published August 14, 2019

CVSS v3.0
7.1
EPSS
1%
Percentile
68.9
In the wild
Unconfirmed
What it is

Clickjack vulnerability in Adminstrator web console in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows remote attackers to conduct clickjacking attacks via a crafted web page that contains an iframe via does not send an X-Frame-Options HTTP header.

The record
Technical detail
CVSS v3.0
7.1 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01239 · 68.9th percentile
Published
2019-08-14T16:20Z
EPSS history
Timeline
  • 14 AUG 16:20Z
    MWG UI: Cross-Frame Scripting vulnerability
    cvelistv5