CVE-2014-6064: McAfee Web Gateway

Medium severity, CVSS 4.0. EPSS: 1.3% chance of exploitation in the next 30 days.

The Accounts tab in the administrative user interface in McAfee Web Gateway (MWG) before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors.

Affected products

• McAfee Web Gateway: from 7.3.0, before 7.3.2.9 (fixed in 7.3.2.9); from 7.4.0, before 7.4.2 (fixed in 7.4.2)

Published 2014-09-02. Last modified 2026-06-17.