Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:email_gateway:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMcafee (b3716737-1d68-5e90-9de7-ce927cce9af4)
ProductEmail Gateway (41475657-86b9-5a2d-b017-a2029b627649)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-7268 vulnerable 2026-06-08 05:27:12.754690 McAfee Email Gateway (MEG) - Path Traversal vulnerability
MEDIUM (4.3)
Path Traversal vulnerability in McAfee McAfee Email Gateway (MEG) prior to 7.6.406 allows remote attackers to traverse the file system to access files or directories that are outside of the restricted directory via external input to construct a path name that should be within a restricted directory.
Published: 2020-09-16T01:20:13.000Z
Updated: 2024-08-04T09:25:48.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8005 vulnerable 2026-06-08 05:08:13.675517 Details available
File extension filtering vulnerability in Intel Security McAfee Email Gateway (MEG) before 7.6.404h1128596 allows attackers to fail to identify the file name properly via scanning an email with a forged attached filename that uses a null byte within the filename extension.
Published: 2017-03-14T22:00:00.000Z
Updated: 2024-08-06T02:13:21.613Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1619 vulnerable 2026-06-08 05:06:25.939991 Details available
Cross-site scripting (XSS) vulnerability in the Secure Web Mail Client user interface in McAfee Email Gateway (MEG) 7.6.x before 7.6.3.2, 7.5.x before 75.6, 7.0.x through 7.0.5, 5.6, and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified tokens in Digest messages.
Published: 2015-02-17T15:00:00.000Z
Updated: 2024-09-16T23:46:13.680Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1348 vulnerable 2026-06-08 04:51:22.170788 Details available
The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for Email Servers, Email Gateway, and Active Virus Defense allows remote attackers to bypass virus detection via (1) an invalid Headflags field in a malformed RAR archive, (2) an invalid Packsize field in a malformed RAR archive, or (3) an invalid Filelength field in a malformed ZIP archive.
Published: 2009-04-30T20:00:00.000Z
Updated: 2024-08-07T05:13:24.691Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.