{"id":"CVE-2020-7295","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-7295","generatedAt":"2026-10-27T21:19:51.665Z","title":"Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the user interface.","description":"Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the user interface.","published":"2020-09-15T23:15:13.000Z","lastModified":"2026-06-17T03:24:40.000Z","status":"Modified","sourceIdentifier":"trellixpsirt@trellix.com","cvss":{"version":"3.1","score":4.6,"severity":"MEDIUM","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},"cwe":["CWE-287"],"affected":["mcafee/web gateway"],"epss":{"score":0.00464,"percentile":0.3993,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.46%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10323","source":"trellixpsirt@trellix.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10323","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-7295","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}