McAfee Vulnerability Manager vulnerabilities

6 CVEs affecting McAfee Vulnerability Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-8989, published 2017-03-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-1472, published 2014-01-16. Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via…
CVE-2013-5094, published 2014-01-28. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inject arbitrary web script or HTML via the cert_cn cookie parameter.
CVE-2015-8989, published 2017-03-14. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. Unsalted password vulnerability in the Enterprise Manager (web portal) component in Intel Security McAfee Vulnerability Manager (MVM) 7.5.8 and earlier allows attackers to more easily decrypt user…
CVE-2015-7612, published 2015-10-01. Medium severity, CVSS 6.8. EPSS: 0.8% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) vulnerabilities in the Organizations page in Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.9 and earlier allow remote attackers to hijack the…
CVE-2014-1473, published 2014-01-16. Medium severity, CVSS 6.8. EPSS: 0.7% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow remote attackers to hijack the authentication of…
CVE-2016-2199, published 2016-02-01. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) vulnerabilities in the Organizations and Remediation management page in Enterprise Manager in McAfee Vulnerability Manager (MVM) before 7.5.10 allow remote…