PT-2018-7317 · Mcafee · Mcafee Network Security Management

Published 2018-04-04 · Updated 2019-10-09 · CVE-2017-3967

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions: McAfee Network Security Management (NSM) versions prior to 8.2.7.42.2

Description: The issue allows remote attackers to inject arbitrary web script or HTML via application pages due to the inability to break out of 3rd party HTML frames in the web interface.

Recommendations: For versions prior to 8.2.7.42.2, update to version 8.2.7.42.2 or later to resolve the issue.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2017-3967

Affected Products

Mcafee Network Security Management

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-3967 · Security Note
• https://osv.dev/vulnerability/CVE-2017-3967 · Vendor Advisory
• https://kc.mcafee.com/corporate/index?page=content&id=SB10192 · Note