CVE-2019-3660

Advanced Threat Defense (ATD) - Improper Neutralization of HTTP requests

High · published November 13, 2019

CVSS v3.1
8.4
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute commands on the server remotely via carefully constructed HTTP requests.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01198 · 67.9th percentile
Published
2019-11-13T23:05Z
EPSS history
Timeline
  • 13 NOV 23:05Z
    Advanced Threat Defense (ATD) - Improper Neutralization of HTTP requests
    cvelistv5