Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:enterprise_mobility_manager:4.7:*:*:*:*:*:*:*

part: a version: 4.7 update: *

VendorMcafee (b3716737-1d68-5e90-9de7-ce927cce9af4)
ProductEnterprise Mobility Manager (5c6a8a9b-4a29-52b8-8a7c-884a17e16bd2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-4592 vulnerable 2026-06-08 05:02:51.590193 Details available
The Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not set the secure flag for the ASP.NET session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
Published: 2012-08-22T10:00:00.000Z
Updated: 2024-08-06T20:42:54.533Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4591 vulnerable 2026-06-08 05:02:51.589896 Details available
About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 discloses the name of the user account for an IIS worker process, which allows remote attackers to obtain potentially sensitive information by visiting this page.
Published: 2012-08-22T10:00:00.000Z
Updated: 2024-08-06T20:42:54.816Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4590 vulnerable 2026-06-08 05:02:51.589566 Details available
Multiple cross-site scripting (XSS) vulnerabilities in About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 might allow remote attackers to inject arbitrary web script or HTML via the (1) User Agent or (2) Connection variable.
Published: 2012-08-22T10:00:00.000Z
Updated: 2024-08-06T20:42:54.965Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4589 vulnerable 2026-06-08 05:02:51.589157 Details available
Login.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
Published: 2012-08-22T10:00:00.000Z
Updated: 2024-08-06T20:42:54.544Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.