McAfee Email and Web Security 5.6
Approved changes feed: RSS · Atom
cpe:2.3:a:mcafee:email_and_web_security:5.6:*:*:*:*:*:*:*
part: a version: 5.6 update: *
| Vendor | Mcafee (b3716737-1d68-5e90-9de7-ce927cce9af4) |
|---|---|
| Product | Email And Web Security (9bcf1a95-57c8-5021-8919-64fdd2423e94) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-4597 |
vulnerable | 2026-06-08 05:02:51.607800 |
Details available
Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to the McAfee Security Appliance Management Console/Dashboard.
Published: 2012-08-22T10:00:00.000Z
Updated: 2024-08-06T20:42:54.549Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4595 |
vulnerable | 2026-06-08 05:02:51.605461 |
Details available
McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to bypass authentication and obtain an admin session ID via unspecified vectors.
Published: 2012-08-22T10:00:00.000Z
Updated: 2024-08-06T20:42:54.941Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4586 |
vulnerable | 2026-06-08 05:02:51.582567 |
Details available
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, accesses files with the privileges of the root user, which allows remote authenticated users to bypass intended permission settings by requesting a file.
Published: 2012-08-22T10:00:00.000Z
Updated: 2024-09-16T23:45:25.033Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4585 |
vulnerable | 2026-06-08 05:02:51.582263 |
Details available
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to read arbitrary files via a crafted URL.
Published: 2012-08-22T10:00:00.000Z
Updated: 2024-08-06T20:42:54.583Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4584 |
vulnerable | 2026-06-08 05:02:51.581936 |
Details available
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not properly encrypt system-backup data, which makes it easier for remote authenticated users to obtain sensitive information by reading a backup file, as demonstrated by obtaining password hashes.
Published: 2012-08-22T10:00:00.000Z
Updated: 2024-08-06T20:42:54.499Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4583 |
vulnerable | 2026-06-08 05:02:51.581600 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4582 |
vulnerable | 2026-06-08 05:02:51.581258 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4581 |
vulnerable | 2026-06-08 05:02:51.580876 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4580 |
vulnerable | 2026-06-08 05:02:51.579740 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4014 |
vulnerable | 2026-06-08 05:02:15.562599 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.