Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:network_security_management_(nsm):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMcafee (b3716737-1d68-5e90-9de7-ce927cce9af4)
ProductNetwork Security Management (Nsm) (2d8efd06-359c-5aee-85a3-eab805e5f785)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-7336 vulnerable 2026-06-08 05:27:12.872665 Network Security Management (NSM) - Cross Site Request Forgery vulnerability
MEDIUM (6.6)
Cross Site Request Forgery vulnerability in McAfee Network Security Management (NSM) prior to 10.1.7.35 and NSM 9.x prior to 9.2.9.55 may allow an attacker to change the configuration of the Network Security Manager via a carefully crafted HTTP request.
Published: 2021-01-05T23:10:17.000Z
Updated: 2024-08-04T09:25:49.109Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7284 vulnerable 2026-06-08 05:27:12.787049 Network Security Management (NSM) - Exposure of Sensitive Information
HIGH (8.6)
Exposure of Sensitive Information in McAfee Network Security Management (NSM) prior to 10.1.7.7 allows local users to gain unauthorised access to the root account via execution of carefully crafted commands from the restricted command line interface (CLI).
Published: 2020-07-03T18:40:12.000Z
Updated: 2024-08-04T09:25:48.430Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7258 vulnerable 2026-06-08 05:27:12.717972 Network Security Management (NSM) - Cross site scripting vulnerability
MEDIUM (4.8)
Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors.
Published: 2020-03-18T21:05:15.000Z
Updated: 2024-08-04T09:25:48.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7256 vulnerable 2026-06-08 05:27:12.714852 Network Security Management (NSM) - Cross site scripting vulnerability
MEDIUM (4.8)
Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors.
Published: 2020-03-18T21:05:23.000Z
Updated: 2024-08-04T09:25:48.956Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6681 vulnerable 2026-06-08 05:11:54.113329 SB10244 - Network Security Management (NSM) - Abuse of Functionality vulnerability
MEDIUM (5.5)
Abuse of Functionality vulnerability in the web interface in McAfee Network Security Management (NSM) 9.1.7.11 and earlier allows authenticated users to allow arbitrary HTML code to be reflected in the response web page via appliance web interface.
Published: 2018-07-17T13:00:00.000Z
Updated: 2024-08-05T06:10:11.272Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3972 vulnerable 2026-06-08 05:09:38.198553 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3971 vulnerable 2026-06-08 05:09:38.198237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3969 vulnerable 2026-06-08 05:09:38.197826 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3968 vulnerable 2026-06-08 05:09:38.194991 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3967 vulnerable 2026-06-08 05:09:38.194650 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3966 vulnerable 2026-06-08 05:09:38.194349 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3965 vulnerable 2026-06-08 05:09:38.194039 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3964 vulnerable 2026-06-08 05:09:38.193715 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3962 vulnerable 2026-06-08 05:09:38.193316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3961 vulnerable 2026-06-08 05:09:38.192965 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3960 vulnerable 2026-06-08 05:09:38.191661 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.