CVE-2015-1619

Опубликовано: 17 фев. 2015

Источник: nvd

CVSS2: 3.5

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the Secure Web Mail Client user interface in McAfee Email Gateway (MEG) 7.6.x before 7.6.3.2, 7.5.x before 75.6, 7.0.x through 7.0.5, 5.6, and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified tokens in Digest messages.

Ссылки

https://kc.mcafee.com/corporate/index?page=content&id=SB10099
Vendor Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10099
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mcafee:email_gateway:*:*:*:*:*:*:*:*

Версия до 5.6 (включая)

cpe:2.3:a:mcafee:email_gateway:7.0:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:email_gateway:7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:email_gateway:7.0.2:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:email_gateway:7.0.3:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:email_gateway:7.0.4:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:email_gateway:7.0.5:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:email_gateway:7.5:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:email_gateway:7.5.1:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:email_gateway:7.5.2:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:email_gateway:7.5.3:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:email_gateway:7.5.4:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:email_gateway:7.5.5:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:email_gateway:7.6:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:email_gateway:7.6.1:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:email_gateway:7.6.2:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:email_gateway:7.6.3:*:*:*:*:*:*:*

EPSS

Процентиль: 40%

0.00185

Низкий

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-gvcm-q483-j52p

github

больше 3 лет назад