CVE-2021-4038: NSM vulnerable to XSS
Cross Site Scripting (XSS) vulnerability in McAfee Network Security Manager (NSM) prior to 10.1 Minor 7 allows a remote authenticated administrator to embed a XSS in the administrator interface via specially crafted custom rules containing HTML. NSM did not correctly sanitize custom rule content in all scenarios.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-4038?
The severity of CVE-2021-4038 is medium, with a severity value of 4.8.
How does CVE-2021-4038 affect McAfee Network Security Manager?
CVE-2021-4038 affects McAfee Network Security Manager versions prior to 10.1 Minor 7.
How can a remote authenticated administrator exploit CVE-2021-4038?
A remote authenticated administrator can exploit CVE-2021-4038 by embedding a XSS in the administrator interface via specially crafted custom rules containing HTML.
What is the Common Weakness Enumeration (CWE) ID for CVE-2021-4038?
The Common Weakness Enumeration (CWE) ID for CVE-2021-4038 is 79.
How can I fix CVE-2021-4038 in McAfee Network Security Manager?
To fix CVE-2021-4038 in McAfee Network Security Manager, update to version 10.1 Minor 7 or later.