VulnerabilityModified
CVE-2014-1473
Multiple cross-site request forgery (CSRF) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow remote attackers to hijack the authentication of users for requests that modify HTML via unspecified…
MEDIUM 6.8EPSS 0.69%
Does this matter?
Lower severity and a low EPSS score (0.69%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow remote attackers to hijack the authentication of users for requests that modify HTML via unspecified vectors related to the "response web page."
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 0.69% probability · 51th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-352
- Affected
- mcafee/vulnerability manager
- Source
- cve@mitre.org
References
- http://osvdb.org/101939
- http://secunia.com/advisories/56394Vendor Advisory
- http://www.securityfocus.com/bid/64795
- http://www.securitytracker.com/id/1029591
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90245
- https://kc.mcafee.com/corporate/index?page=content&id=SB10061Vendor Advisory
- http://osvdb.org/101939
- http://secunia.com/advisories/56394Vendor Advisory
- http://www.securityfocus.com/bid/64795
- http://www.securitytracker.com/id/1029591
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90245
- https://kc.mcafee.com/corporate/index?page=content&id=SB10061Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.