McAfee Web Gateway vulnerabilities

4 CVEs affecting McAfee Web Gateway, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-3581, published 2019-01-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-6667, published 2018-06-26. Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days. Authentication Bypass vulnerability in the administrative user interface in McAfee Web Gateway 7.8.1.0 through 7.8.1.5 allows remote attackers to execute arbitrary code via Java management extensions…
CVE-2019-3581, published 2019-01-09. High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days. Improper input validation in the proxy component of McAfee Web Gateway 7.8.2.0 and later allows remote attackers to cause a denial of service via a crafted HTTP request parameter.
CVE-2018-6677, published 2018-07-23. Critical severity, CVSS 9.1. EPSS: 2.1% chance of exploitation in the next 30 days. Directory Traversal vulnerability in the administrative user interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to gain elevated privileges via unspecified…
CVE-2018-6678, published 2018-07-23. Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days. Configuration/Environment manipulation vulnerability in the administrative interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to execute arbitrary commands via…