McAfee Intrushield Network Security Manager vulnerabilities

2 CVEs affecting McAfee Intrushield Network Security Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-3566, published 2009-11-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-3566, published 2009-11-13. Medium severity, CVSS 4.3. EPSS: 4% chance of exploitation in the next 30 days. McAfee IntruShield Network Security Manager (NSM) before 5.1.11.8.1 does not include the HTTPOnly flag in the Set-Cookie header for the session identifier, which allows remote attackers to hijack a…
CVE-2009-3565, published 2009-11-13. Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in intruvert/jsp/module/Login.jsp in McAfee IntruShield Network Security Manager (NSM) before 5.1.11.6 allow remote attackers to inject arbitrary…