Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee,_llc:mcafee_web_gateway_(mwg):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMcafee, Llc (29c15f68-63cd-5177-80ed-677606d05f07)
ProductMcafee Web Gateway (Mwg) (4f06e2bc-cea7-53ce-9ebd-db722cd0ed8d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-3644 vulnerable 2026-06-03 14:40:26.710797 MWG scanners updated to address CVE-2019-9517
HIGH (7.5)
McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service. This affects the scanning proxies.
Published: 2019-09-11T14:08:37.545Z
Updated: 2024-09-17T01:11:51.259Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3643 vulnerable 2026-06-03 14:40:26.698919 MWG scanners updated to address CVE-2019-9511
MEDIUM (5.3)
McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, potentially leading to a denial of service. This affects the scanning proxies.
Published: 2019-09-11T14:08:19.340Z
Updated: 2024-09-16T17:49:16.217Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3639 vulnerable 2026-06-03 14:40:26.693830 MWG UI: Cross-Frame Scripting vulnerability
HIGH (7.1)
Clickjack vulnerability in Adminstrator web console in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows remote attackers to conduct clickjacking attacks via a crafted web page that contains an iframe via does not send an X-Frame-Options HTTP header.
Published: 2019-08-14T16:20:39.000Z
Updated: 2024-08-04T19:12:09.699Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3635 vulnerable 2026-06-03 14:40:26.686975 MWG Proxy: Cross-Frame Scripting vulnerability
MEDIUM (4.3)
Exfiltration of Data in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows attackers to obtain sensitive data via crafting a complex webpage that will trigger the Web Gateway to block the user accessing an iframe.
Published: 2019-08-14T16:18:50.000Z
Updated: 2024-08-04T19:12:09.670Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.