McAfee Email And Web Security vulnerabilities

10 CVEs affecting McAfee Email And Web Security, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-4014, published 2012-09-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-4595, published 2012-08-22. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to bypass authentication and obtain an admin…
CVE-2012-4014, published 2012-09-25. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Unspecified vulnerability in McAfee Email Anti-virus (formerly WebShield SMTP) allows remote attackers to cause a denial of service via unknown vectors.
CVE-2012-4580, published 2012-08-22. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote…
CVE-2012-4581, published 2012-08-22. Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days. McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not disable the server-side session token upon the closing…
CVE-2012-4597, published 2012-08-22. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to…
CVE-2012-4585, published 2012-08-22. Medium severity, CVSS 4.0. EPSS: 0.9% chance of exploitation in the next 30 days. McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to read arbitrary files via a…
CVE-2012-4583, published 2012-08-22. Medium severity, CVSS 4.0. EPSS: 0.9% chance of exploitation in the next 30 days. McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to obtain the session tokens of…
CVE-2012-4586, published 2012-08-22. Low severity, CVSS 3.5. EPSS: 0.9% chance of exploitation in the next 30 days. McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, accesses files with the privileges of the root user, which allows…
CVE-2012-4582, published 2012-08-22. Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days. McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to reset the passwords of…
CVE-2012-4584, published 2012-08-22. Low severity, CVSS 3.5. EPSS: 0.9% chance of exploitation in the next 30 days. McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not properly encrypt system-backup data, which makes it…