CVE-2017-3964: SB10192 - Network Security Management (NSM) - Reflective Cross-Site Scripting (XSS) vulnerability
Reflective Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to inject arbitrary web script or HTML via a URL parameter.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-3964?
CVE-2017-3964 is a Reflective Cross-Site Scripting (XSS) vulnerability in the web interface of McAfee Network Security Management (NSM) before version 8.2.7.42.2.
How does CVE-2017-3964 affect McAfee Network Security Manager?
CVE-2017-3964 allows attackers to inject arbitrary web script or HTML via a URL parameter in the web interface of McAfee Network Security Manager versions before 8.2.7.42.2.
What is the severity of CVE-2017-3964?
CVE-2017-3964 has a severity rating of 5.4 (medium).
How can I fix CVE-2017-3964 in McAfee Network Security Manager?
To fix CVE-2017-3964, it is recommended to upgrade to version 8.2.7.42.2 or later of McAfee Network Security Manager.
Where can I find more information about CVE-2017-3964?
More information about CVE-2017-3964 can be found in the McAfee Knowledge Center article with ID SB10192.