Intrushield Network Security Manager Security Vulnerabilities and Issues — Intrushield Network Security Manager CVE List

Lucene search

McafeeIntrushield Network Security Manager

2 matches found

CVE•added 2009/11/13 3:30 p.m.•41 views

CVE-2009-3566

McAfee IntruShield Network Security Manager (NSM) before 5.1.11.8.1 does not include the HTTPOnly flag in the Set-Cookie header for the session identifier, which allows remote attackers to hijack a session by leveraging a cross-site scripting (XSS) vulnerability.

4.3CVSS5.7AI score0.05123EPSS

CVE•added 2009/11/13 3:30 p.m.•36 views

CVE-2009-3565

Multiple cross-site scripting (XSS) vulnerabilities in intruvert/jsp/module/Login.jsp in McAfee IntruShield Network Security Manager (NSM) before 5.1.11.6 allow remote attackers to inject arbitrary web script or HTML via the (1) iaction or (2) node parameter.

4.3CVSS5.7AI score0.02997EPSS