Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:network_security_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMcafee (b3716737-1d68-5e90-9de7-ce927cce9af4)
ProductNetwork Security Manager (4308fead-aec9-587a-a491-79ed05ce79fd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-4038 vulnerable 2026-06-08 05:38:08.184250 NSM vulnerable to XSS
MEDIUM (4.8)
Cross Site Scripting (XSS) vulnerability in McAfee Network Security Manager (NSM) prior to 10.1 Minor 7 allows a remote authenticated administrator to embed a XSS in the administrator interface via specially crafted custom rules containing HTML. NSM did not correctly sanitize custom rule content in all scenarios.
Published: 2021-12-09T15:55:17.000Z
Updated: 2024-08-03T17:16:03.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7258 vulnerable 2026-06-08 05:27:12.718003 Network Security Management (NSM) - Cross site scripting vulnerability
MEDIUM (4.8)
Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors.
Published: 2020-03-18T21:05:15.000Z
Updated: 2024-08-04T09:25:48.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7256 vulnerable 2026-06-08 05:27:12.715978 Network Security Management (NSM) - Cross site scripting vulnerability
MEDIUM (4.8)
Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors.
Published: 2020-03-18T21:05:23.000Z
Updated: 2024-08-04T09:25:48.956Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3606 vulnerable 2026-06-08 05:13:55.159037 Data leakage when in an MDR pair by McAfee Network Security Manager 9.x
HIGH (7.7)
Data Leakage Attacks vulnerability in the web portal component when in an MDR pair in McAfee Network Security Management (NSM) 9.1 < 9.1.7.75 (Update 4) and 9.2 < 9.2.7.31 Update2 allows administrators to view configuration information in plain text format via the GUI or GUI terminal commands.
Published: 2019-03-26T17:23:48.000Z
Updated: 2024-08-04T19:12:09.668Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3602 vulnerable 2026-06-08 05:13:55.152979 Cross site scripting vulnerability in McAfee NSM impacting authenticated users
MEDIUM (4.8)
Cross Site Scripting (XSS) vulnerability in McAfee Network Security Manager (NSM) Prior to 9.1 Update 5 allows an authenticated administrator to embed an XSS in the administrator interface via a specially crafted custom rule containing HTML.
Published: 2019-05-15T15:47:03.000Z
Updated: 2024-08-04T19:12:09.689Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3597 vulnerable 2026-06-08 05:13:55.148463 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6681 vulnerable 2026-06-08 05:11:54.114080 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3972 vulnerable 2026-06-08 05:09:38.198583 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3971 vulnerable 2026-06-08 05:09:38.198269 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3969 vulnerable 2026-06-08 05:09:38.197861 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3968 vulnerable 2026-06-08 05:09:38.197445 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3967 vulnerable 2026-06-08 05:09:38.194677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3966 vulnerable 2026-06-08 05:09:38.194376 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3965 vulnerable 2026-06-08 05:09:38.194068 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3964 vulnerable 2026-06-08 05:09:38.193747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3962 vulnerable 2026-06-08 05:09:38.193350 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3961 vulnerable 2026-06-08 05:09:38.193003 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3960 vulnerable 2026-06-08 05:09:38.192564 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2390 vulnerable 2026-06-08 05:05:28.701399 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.