CVE-2019-3666

API Abuse Vulnerability

Medium · published December 3, 2019

CVSS v3.1
6.5
EPSS
2%
Percentile
74.5
In the wild
Unconfirmed
What it is

API Abuse/Misuse vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to navigate to restricted websites via a carefully crafted web site.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01524 · 74.5th percentile
Published
2019-12-03T10:55Z
EPSS history
Timeline
  • 03 DEC 10:55Z
    API Abuse Vulnerability
    cvelistv5