CVE-2020-7336: McAfee Network Security Management

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Cross Site Request Forgery vulnerability in McAfee Network Security Management (NSM) prior to 10.1.7.35 and NSM 9.x prior to 9.2.9.55 may allow an attacker to change the configuration of the Network Security Manager via a carefully crafted HTTP request.

Affected products

• McAfee Network Security Management: from 9.0, before 9.2.9.55 (fixed in 9.2.9.55); from 10.0, before 10.1.7.35 (fixed in 10.1.7.35)

Published 2021-01-05. Last modified 2026-06-17.