CVE-2021-23885

Privilege escalation vulnerability in McAfee Web Gateway MWG prior to 9.2.8 allows an authenticated user to gain elevated privileges through the User Interface and execute commands on the appliance via incorrect improper neutralization of user input in the troubleshooting page...

CVE-2021-23885

Privilege escalation vulnerability in McAfee Web Gateway MWG prior to 9.2.8 allows an authenticated user to gain elevated privileges through the User Interface and execute commands on the appliance via incorrect improper neutralization of user input in the troubleshooting page...

PT-2021-15587

Name of the Vulnerable Software and Affected Versions: McAfee Web Gateway versions prior to 9.2.8 Description: The issue allows an authenticated user to gain elevated privileges through the User Interface and execute commands on the appliance. This is due to incorrect improper neutralization of...

McAfee Web Gateway 安全漏洞

McAfee Web Gateway is a high-performance secure Web gateway with best-in-class threat protection in a unified appliance software architecture. An elevation of privilege vulnerability exists in McAfee Web Gateway MWG versions prior to 9.2.8. The vulnerability stems from improper neutralization of...

CVE-2021-23885: Improper Privilege Management

Privilege escalation vulnerability in McAfee Web Gateway MWG prior to 9.2.8 allows an authenticated user to gain elevated privileges through the User Interface and execute commands on the appliance via incorrect improper neutralization of user input in the troubleshooting page...

Code injection

Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not disable the troubleshooting and diagnostics page in production systems, which allows remote attackers to obtain version numbers, module configuration, and other sensitive information by reading the page...

PT-2013-5605

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE versions 1.2 and earlier Description A cross-site scripting XSS issue exists in the troubleshooting page, allowing remote attackers to inject arbitrary web script or HTML via an unspecified parameter...

CVE-2013-5524: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the troubleshooting page in Cisco Identity Services Engine ISE 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCug77655...