Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:intrushield_network_security_manager:5.1.7.73:*:*:*:*:*:*:*

part: a version: 5.1.7.73 update: *

VendorMcafee (b3716737-1d68-5e90-9de7-ce927cce9af4)
ProductIntrushield Network Security Manager (df041bc5-a8a6-5097-a2e8-c5680fc515ba)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3566 vulnerable 2026-06-08 04:51:42.682363 Details available
McAfee IntruShield Network Security Manager (NSM) before 5.1.11.8.1 does not include the HTTPOnly flag in the Set-Cookie header for the session identifier, which allows remote attackers to hijack a session by leveraging a cross-site scripting (XSS) vulnerability.
Published: 2009-11-13T15:00:00.000Z
Updated: 2024-08-07T06:31:10.476Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3565 vulnerable 2026-06-08 04:51:42.681566 Details available
Multiple cross-site scripting (XSS) vulnerabilities in intruvert/jsp/module/Login.jsp in McAfee IntruShield Network Security Manager (NSM) before 5.1.11.6 allow remote attackers to inject arbitrary web script or HTML via the (1) iaction or (2) node parameter.
Published: 2009-11-13T15:00:00.000Z
Updated: 2024-08-07T06:31:10.485Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.