Mcafee Web Gateway (Mwg) vulnerabilities
8 vulnerabilities
Known vulnerabilities in Mcafee Web Gateway (Mwg), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-6677mcafeemcafee_web_gateway+1
EPSS score2.14%
Directory Traversal vulnerability in the administrative user interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to gain elevated privileges via unspecified vectors.CVE-2018-6678mcafeemcafee_web_gateway+1EPSS score1.24%
Configuration/Environment manipulation vulnerability in the administrative interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to execute arbitrary commands via unspecified vectors.CVE-2020-7293mcafeemcafee web gateway (mwg)+1EPSS score0.66%
Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access controls in the user interface.CVE-2020-7297mcafeemcafee web gateway (mwg)+1EPSS score0.43%
Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected dashboard data via improper access control in the user interface.CVE-2020-7294mcafeemcafee web gateway (mwg)+1EPSS score0.39%
Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected files via improper access controls in the REST interface.CVE-2020-7292mcafeemcafee web gateway (mwg)+1EPSS score0.86%
Inappropriate Encoding for output context vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows a remote attacker to cause MWG to return an ambiguous redirect response via getting a user to click on a malicious URL.CVE-2020-7296mcafeemcafee web gateway (mwg)+1EPSS score0.43%
Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected configuration files via improper access control in the user interface.CVE-2020-7295mcafeemcafee web gateway (mwg)+1EPSS score0.46%
Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the user interface.