CVE-2019-3665

Code Injection vulnerability

Medium · published December 3, 2019

CVSS v3.1
6.5
EPSS
1%
Percentile
60.5
In the wild
Unconfirmed
What it is

Code Injection vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to render a website which Web Advisor would normally have blocked via a carefully crafted web site.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00937 · 60.5th percentile
Published
2019-12-03T10:55Z
EPSS history
Timeline
  • 03 DEC 10:55Z
    Code Injection vulnerability
    cvelistv5