Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:email_gateway:7.0:*:*:*:*:*:*:*

part: a version: 7.0 update: *

VendorMcafee (b3716737-1d68-5e90-9de7-ce927cce9af4)
ProductEmail Gateway (41475657-86b9-5a2d-b017-a2029b627649)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-1619 vulnerable 2026-06-08 05:06:25.940603 Details available
Cross-site scripting (XSS) vulnerability in the Secure Web Mail Client user interface in McAfee Email Gateway (MEG) 7.6.x before 7.6.3.2, 7.5.x before 75.6, 7.0.x through 7.0.5, 5.6, and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified tokens in Digest messages.
Published: 2015-02-17T15:00:00.000Z
Updated: 2024-09-16T23:46:13.680Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4586 vulnerable 2026-06-08 05:02:51.582583 Details available
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, accesses files with the privileges of the root user, which allows remote authenticated users to bypass intended permission settings by requesting a file.
Published: 2012-08-22T10:00:00.000Z
Updated: 2024-09-16T23:45:25.033Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4585 vulnerable 2026-06-08 05:02:51.582279 Details available
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to read arbitrary files via a crafted URL.
Published: 2012-08-22T10:00:00.000Z
Updated: 2024-08-06T20:42:54.583Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4584 vulnerable 2026-06-08 05:02:51.581952 Details available
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not properly encrypt system-backup data, which makes it easier for remote authenticated users to obtain sensitive information by reading a backup file, as demonstrated by obtaining password hashes.
Published: 2012-08-22T10:00:00.000Z
Updated: 2024-08-06T20:42:54.499Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4583 vulnerable 2026-06-08 05:02:51.581616 Details available
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to obtain the session tokens of arbitrary users by navigating within the Dashboard.
Published: 2012-08-22T10:00:00.000Z
Updated: 2024-08-06T20:42:54.249Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4582 vulnerable 2026-06-08 05:02:51.581274 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4581 vulnerable 2026-06-08 05:02:51.580894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4580 vulnerable 2026-06-08 05:02:51.580443 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.