CVE-2014-1472: XSS
Published Jan 16, 2014
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
3 affected components
McAfee Vulnerability Manager<=7.5.5
McAfee Vulnerability Manager=7.0.11
McAfee Vulnerability Manager=7.5.4
Event History
Jan 16, 2014
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Data Sourced
via NVD·05:05 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-1472?
CVE-2014-1472 has been classified as having a high severity due to its potential for allowing arbitrary web script or HTML injections.
2
How do I fix CVE-2014-1472?
To fix CVE-2014-1472, you should upgrade McAfee Vulnerability Manager to version 7.5.6 or later.
3
What are the affected versions in CVE-2014-1472?
CVE-2014-1472 affects McAfee Vulnerability Manager versions 7.5.5 and earlier, including 7.0.11 and 7.5.4.
4
What type of vulnerability is CVE-2014-1472?
CVE-2014-1472 is classified as a cross-site scripting (XSS) vulnerability.
5
Can CVE-2014-1472 be exploited remotely?
Yes, CVE-2014-1472 can be exploited remotely by attackers to inject malicious scripts.