CVE-2020-7292: McAfee Web Gateway

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

Inappropriate Encoding for output context vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows a remote attacker to cause MWG to return an ambiguous redirect response via getting a user to click on a malicious URL.

Affected products

• McAfee Web Gateway: from 7.8.0, before 7.8.2.22 (fixed in 7.8.2.22); from 8.2.0, before 8.2.9 (fixed in 8.2.9); from 9.0.0, before 9.2.1 (fixed in 9.2.1)

Published 2020-07-15. Last modified 2026-06-17.