CVE-2019-3670

Remote Code Execution vulnerability

High · published February 24, 2020

CVSS v3.1
8.0
EPSS
1%
Percentile
66.9
In the wild
Unconfirmed
What it is

Remote Code Execution vulnerability in the web interface in McAfee Web Advisor (WA) 8.0.34745 and earlier allows remote unauthenticated attacker to execute arbitrary code via a cross site scripting attack.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01160 · 66.9th percentile
Published
2020-02-24T10:10Z
EPSS history
Timeline
  • 24 FEB 10:10Z
    Remote Code Execution vulnerability
    cvelistv5