CVE-2020-7336CWE-352

Network Security Management (NSM) - Cross Site Request Forgery vulnerability

Medium · published January 5, 2021

CVSS v3.1
6.6
EPSS
1%
Percentile
43.9
In the wild
Unconfirmed
What it is

Cross Site Request Forgery vulnerability in McAfee Network Security Management (NSM) prior to 10.1.7.35 and NSM 9.x prior to 9.2.9.55 may allow an attacker to change the configuration of the Network Security Manager via a carefully crafted HTTP request.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00530 · 43.9th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2021-01-05T23:10Z
EPSS history
Timeline
  • 05 JAN 23:10Z
    Network Security Management (NSM) - Cross Site Request Forgery vulnerability
    cvelistv5