CVEvulnerability
CVE-2014-1472
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-01-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• mcafee vulnerability manager (<= 7.5.5)
• mcafee vulnerability manager 7.0.11
• mcafee vulnerability manager 7.5.4
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/101940 osvdb.org
- http://secunia.com/advisories/56394 Vendor Advisory
- http://www.securityfocus.com/bid/64795 www.securityfocus.com
- http://www.securitytracker.com/id/1029591 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90244 exchange.xforce.ibmcloud.com
- https://kc.mcafee.com/corporate/index?page=content&id=SB10061 Vendor Advisory
- http://osvdb.org/101940 osvdb.org
- http://secunia.com/advisories/56394 Vendor Advisory
- http://www.securityfocus.com/bid/64795 www.securityfocus.com
- http://www.securitytracker.com/id/1029591 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90244 exchange.xforce.ibmcloud.com
- https://kc.mcafee.com/corporate/index?page=content&id=SB10061 Vendor Advisory