CVE-2019-3665: McAfee Webadvisor

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Code Injection vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to render a website which Web Advisor would normally have blocked via a carefully crafted web site.

Affected products

• McAfee Webadvisor: before 4.1.1.48 (fixed in 4.1.1.48)

Published 2019-12-03. Last modified 2026-06-17.