Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:email_and_web_security:5.0:*:*:*:*:*:*:*

part: a version: 5.0 update: *

VendorMcafee (b3716737-1d68-5e90-9de7-ce927cce9af4)
ProductEmail And Web Security (9bcf1a95-57c8-5021-8919-64fdd2423e94)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-4586 vulnerable 2026-06-08 05:02:51.582529 Details available
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, accesses files with the privileges of the root user, which allows remote authenticated users to bypass intended permission settings by requesting a file.
Published: 2012-08-22T10:00:00.000Z
Updated: 2024-09-16T23:45:25.033Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4585 vulnerable 2026-06-08 05:02:51.582226 Details available
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to read arbitrary files via a crafted URL.
Published: 2012-08-22T10:00:00.000Z
Updated: 2024-08-06T20:42:54.583Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4584 vulnerable 2026-06-08 05:02:51.581898 Details available
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not properly encrypt system-backup data, which makes it easier for remote authenticated users to obtain sensitive information by reading a backup file, as demonstrated by obtaining password hashes.
Published: 2012-08-22T10:00:00.000Z
Updated: 2024-08-06T20:42:54.499Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4583 vulnerable 2026-06-08 05:02:51.581562 Details available
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to obtain the session tokens of arbitrary users by navigating within the Dashboard.
Published: 2012-08-22T10:00:00.000Z
Updated: 2024-08-06T20:42:54.249Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4582 vulnerable 2026-06-08 05:02:51.581218 Details available
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to reset the passwords of arbitrary administrative accounts via unspecified vectors.
Published: 2012-08-22T10:00:00.000Z
Updated: 2024-08-06T20:42:54.971Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4581 vulnerable 2026-06-08 05:02:51.580831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4580 vulnerable 2026-06-08 05:02:51.578698 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4014 vulnerable 2026-06-08 05:02:15.561517 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.