CVE-2019-3602: McAfee Network Security Manager

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in McAfee Network Security Manager (NSM) Prior to 9.1 Update 5 allows an authenticated administrator to embed an XSS in the administrator interface via a specially crafted custom rule containing HTML.

Affected products

• McAfee Network Security Manager: before 9.1 (fixed in 9.1); version 9.1 only

Published 2019-05-15. Last modified 2026-06-17.