Latest mcafee web gateway Vulnerabilities

● CVE-2022-1254

McAfee Web Gateway>=7.0.0<7.8.2.31

McAfee Web Gateway>=8.0.0<8.2.27

McAfee Web Gateway>=9.0.0<9.2.20

McAfee Web Gateway>=10.0.0<10.2.9

McAfee Web Gateway>=11.0.0<11.1.3

● CVE-2021-3450

OpenSSL could allow a remote attacker to bypass security restrictions, caused by a missing check in the validation logic of X.509 certificate chains by the X509_V_FLAG_X509_STRICT flag. By using any v...

rust/openssl-src>=111.11.0<111.15.0

IBM Security Verify Access<=10.0.0

OpenSSL OpenSSL>=1.1.1h<1.1.1k

FreeBSD FreeBSD=12.2

FreeBSD FreeBSD=12.2-p1

FreeBSD FreeBSD=12.2-p2

and 52 more

● CVE-2021-3449

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it...

rust/openssl-src<111.15.0

debian/openssl

IBM Cognos Analytics<=12.0.0-12.0.1

IBM Cognos Analytics<=11.2.0-11.2.4 FP2

IBM Cognos Analytics<=11.1.1-11.1.7 FP7

OpenSSL OpenSSL>=1.1.1<1.1.1k

and 202 more

● CVE-2021-23885

Privilege escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.8 allows an authenticated user to gain elevated privileges through the User Interface and execute commands on the appliance ...

McAfee Web Gateway<8.2.17

McAfee Web Gateway>=9.2<9.2.8

McAfee Web Gateway>=10.0<10.0.4

● CVE-2021-3156

Sudo Heap-Based Buffer Overflow Vulnerability

debian/sudo

IBM Security Guardium<=10.5

IBM Security Guardium<=10.6

IBM Security Guardium<=11.0

IBM Security Guardium<=11.1

IBM Security Guardium<=11.2

and 55 more

● CVE-2020-7297

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected dashboard data via improper access control in the user interf...

McAfee Web Gateway>=7.8.0<7.8.2.22

McAfee Web Gateway>=8.2.0<8.2.9

McAfee Web Gateway>=9.0.0<9.2.1

● CVE-2020-7295

McAfee Web Gateway>=7.8.0<7.8.2.23

McAfee Web Gateway>=8.2.0<8.2.11

McAfee Web Gateway>=9.0.0<9.2.3

● CVE-2020-7296

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected configuration files via improper access control in the user i...

McAfee Web Gateway>=7.8.0<7.8.2.23

McAfee Web Gateway>=8.2.0<8.2.11

McAfee Web Gateway>=9.0.0<9.2.3

● CVE-2020-7293

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access con...

McAfee Web Gateway>=7.8.0<7.8.2.23

McAfee Web Gateway>=8.2.0<8.2.11

McAfee Web Gateway>=9.0.0<9.2.3

● CVE-2020-7294

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected files via improper access controls in the REST in...

McAfee Web Gateway>=7.8.0<7.8.2.23

McAfee Web Gateway>=8.2.0<8.2.11

McAfee Web Gateway>=9.0.0<9.2.3

● CVE-2019-3638

Reflected Cross Site Scripting vulnerability in Administrators web console in McAfee Web Gateway (MWG) 7.8.x prior to 7.8.2.13 allows remote attackers to collect sensitive information or execute comma...

McAfee Web Gateway>=7.8.2<7.8.2.13

McAfee Web Gateway>=8.0.0<8.2.0

● CVE-2019-3644

McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service. This affects the scanning proxies.

McAfee Active Response=1.0.0

McAfee Active Response=1.1.0

McAfee Active Response=2.0

McAfee Active Response=2.0.1

McAfee Active Response=2.1

McAfee Active Response=2.2

and 18 more

● CVE-2019-3643

McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, potentially leading to a denial of service. This affects the scanning proxies.

McAfee Active Response=1.0.0

McAfee Active Response=1.1.0

McAfee Active Response=2.0

McAfee Active Response=2.0.1

McAfee Active Response=2.1

McAfee Active Response=2.2

and 18 more

● CVE-2019-3635

Exfiltration of Data in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows attackers to obtain sensitive data via crafting a complex webpage that will trigger the Web Gateway to block the user ...

McAfee Web Gateway>=7.8.2.0<7.8.2.12

● CVE-2019-3639

Clickjack vulnerability in Adminstrator web console in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows remote attackers to conduct clickjacking attacks via a crafted web page that contains a...

McAfee Web Gateway>=7.8.2.0<7.8.2.12

● CVE-2019-9517

Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2 window so the peer can send without constr...

redhat/jbcs-httpd24-httpd<0:2.4.29-41.jbcs.el6

redhat/jbcs-httpd24-nghttp2<0:1.39.2-1.jbcs.el6

redhat/jbcs-httpd24-apr<0:1.6.3-63.jbcs.el6

redhat/jbcs-httpd24-apr-util<0:1.6.1-48.jbcs.el6

redhat/jbcs-httpd24-brotli<0:1.0.6-7.jbcs.el6

redhat/jbcs-httpd24-curl<0:7.64.1-14.jbcs.el6

and 77 more

● CVE-2019-9511

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data ...

redhat/jbcs-httpd24-httpd<0:2.4.29-41.jbcs.el6

redhat/jbcs-httpd24-nghttp2<0:1.39.2-1.jbcs.el6

redhat/jbcs-httpd24-apr<0:1.6.3-63.jbcs.el6

redhat/jbcs-httpd24-apr-util<0:1.6.1-48.jbcs.el6

redhat/jbcs-httpd24-brotli<0:1.0.6-7.jbcs.el6

redhat/jbcs-httpd24-curl<0:7.64.1-14.jbcs.el6

and 168 more

● CVE-2019-9516

Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, o...

redhat/jbcs-httpd24-httpd<0:2.4.29-41.jbcs.el6

redhat/jbcs-httpd24-nghttp2<0:1.39.2-1.jbcs.el6

redhat/jbcs-httpd24-apr<0:1.6.3-63.jbcs.el6

redhat/jbcs-httpd24-apr-util<0:1.6.1-48.jbcs.el6

redhat/jbcs-httpd24-brotli<0:1.0.6-7.jbcs.el6

redhat/jbcs-httpd24-curl<0:7.64.1-14.jbcs.el6

and 72 more

● CVE-2019-9518

Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service. The attacker sends a stream of frames with an empty payload and without the end-of-st...

redhat/rh-nodejs10<0:3.2-3.el7

redhat/rh-nodejs10-nodejs<0:10.16.3-3.el7

redhat/rh-nodejs8<0:3.0-5.el7

redhat/rh-nodejs8-nodejs<0:8.16.1-2.el7

redhat/envoy<1.11.1

redhat/Nodejs<8.16.1

and 45 more

● CVE-2019-9515

Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the ...

redhat/eap7-apache-cxf<0:3.2.10-1.redhat_00001.1.el6ea

redhat/eap7-byte-buddy<0:1.9.11-1.redhat_00002.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.5-5.SP3_redhat_00003.1.el6ea

redhat/eap7-hal-console<0:3.0.17-2.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.13-1.Final_redhat_00001.1.el6ea

redhat/eap7-ironjacamar<0:1.4.18-1.Final_redhat_00001.1.el6ea

and 141 more

● CVE-2019-9514

A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest t...

redhat/go-toolset<1.11-0:1.11.13-1.el7

redhat/go-toolset<1.11-golang-0:1.11.13-2.el7

redhat/containernetworking-plugins<0:0.8.1-4.el7_7

redhat/eap7-apache-cxf<0:3.2.10-1.redhat_00001.1.el6ea

redhat/eap7-byte-buddy<0:1.9.11-1.redhat_00002.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.5-5.SP3_redhat_00003.1.el6ea

and 221 more

● CVE-2019-9513

Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the str...

redhat/jbcs-httpd24-httpd<0:2.4.29-41.jbcs.el6

redhat/jbcs-httpd24-nghttp2<0:1.39.2-1.jbcs.el6

redhat/jbcs-httpd24-apr<0:1.6.3-63.jbcs.el6

redhat/jbcs-httpd24-apr-util<0:1.6.1-48.jbcs.el6

redhat/jbcs-httpd24-brotli<0:1.0.6-7.jbcs.el6

redhat/jbcs-httpd24-curl<0:7.64.1-14.jbcs.el6

and 104 more

● CVE-2019-1559

OpenSSL could allow a remote attacker to obtain sensitive information, caused by the failure to immediately close the TCP connection after the hosts encounter a zero-length record with valid padding. ...

redhat/openssl<0:1.0.1e-58.el6_10

redhat/openssl<1:1.0.2k-19.el7

redhat/jws5-ecj<0:4.12.0-1.redhat_1.1.el6

redhat/jws5-javapackages-tools<0:3.4.1-5.15.11.el6

redhat/jws5-jboss-logging<0:3.3.2-1.Final_redhat_00001.1.el6

redhat/jws5-tomcat<0:9.0.21-10.redhat_4.1.el6

and 226 more

● CVE-2019-9169

GNU glibc is vulnerable to a heap-based buffer overflow, caused by a buffer over-read flaw in the proceed_next_node function in posix/regexec.c. By sending a specially-crafted argument using a case-in...

IBM Security Verify Access<=10.0.0

GNU glibc<=2.29

Netapp Cloud Backup

NetApp ONTAP Select Deploy administration utility

Netapp Steelstore Cloud Integrated Storage

McAfee Web Gateway>=7.7.2.0<7.7.2.21

and 9 more

● CVE-2019-6454

An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D...

Systemd Project Systemd=239

openSUSE Leap=15.0

Netapp Active Iq Performance Analytics Services

Debian Debian Linux=8.0

Debian Debian Linux=9.0

Fedoraproject Fedora=29

and 53 more

● CVE-2018-18311

A flaw was found in Perl versions 5.8.0 through 5.28. An Integer overflow leading to buffer overflow in Perl_my_setenv function in util.c Upstream Patch: <a href="https://github.com/Perl/perl5/commi...

Perl Perl<5.26.3

Perl Perl>=5.28.0<5.28.1

Canonical Ubuntu Linux=12.04

Canonical Ubuntu Linux=14.04

Canonical Ubuntu Linux=16.04

Canonical Ubuntu Linux=18.04

and 35 more

Latest mcafee web gateway Vulnerabilities

Company

Resources

Contact