Mcafee

Email Gateway

20 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2020-7268

  • EPSS 0.15%
  • Veröffentlicht 16.09.2020 02:15:12
  • Zuletzt bearbeitet 21.11.2024 05:36:57

Path Traversal vulnerability in McAfee McAfee Email Gateway (MEG) prior to 7.6.406 allows remote attackers to traverse the file system to access files or directories that are outside of the restricted directory via external input to construct a path ...

6.5

CVE-2016-8005

  • EPSS 0.22%
  • Veröffentlicht 14.03.2017 22:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

File extension filtering vulnerability in Intel Security McAfee Email Gateway (MEG) before 7.6.404h1128596 allows attackers to fail to identify the file name properly via scanning an email with a forged attached filename that uses a null byte within ...

6.1

CVE-2016-3969

  • EPSS 0.25%
  • Veröffentlicht 06.04.2016 18:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in McAfee Email Gateway (MEG) 7.6.x before 7.6.404, when File Filtering is enabled with the action set to ESERVICES:REPLACE, allows remote attackers to inject arbitrary web script or HTML via an attachment in ...

3.5

CVE-2015-1619

  • EPSS 0.19%
  • Veröffentlicht 17.02.2015 15:59:10
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the Secure Web Mail Client user interface in McAfee Email Gateway (MEG) 7.6.x before 7.6.3.2, 7.5.x before 75.6, 7.0.x through 7.0.5, 5.6, and earlier allows remote authenticated users to inject arbitrary w...

9

CVE-2013-7104

Exploit
  • EPSS 0.75%
  • Veröffentlicht 14.12.2013 17:21:47
  • Zuletzt bearbeitet 11.04.2025 00:51:21

McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands by specifying them in the value attribute in a (1) Command or (2) Script XML element. NOTE: this issue can be combined with CVE-2013-7092 to allow remo...

9

CVE-2013-7103

Exploit
  • EPSS 0.75%
  • Veröffentlicht 14.12.2013 17:21:47
  • Zuletzt bearbeitet 11.04.2025 00:51:21

McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the value attribute in a (1) TestFile XML element or the (2) hostname. NOTE: this issue can be combined with CVE-2013-7092 ...

6.5

CVE-2013-7092

Exploit
  • EPSS 0.47%
  • Veröffentlicht 13.12.2013 18:07:54
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple SQL injection vulnerabilities in /admin/cgi-bin/rpc/doReport/18 in McAfee Email Gateway 7.6 allow remote authenticated users to execute arbitrary SQL commands via the (1) events_col, (2) event_id, (3) reason, (4) events_order, (5) emailstatu...

8.5

CVE-2013-6349

  • EPSS 0.72%
  • Veröffentlicht 02.11.2013 21:55:04
  • Zuletzt bearbeitet 11.04.2025 00:51:21

McAfee Email Gateway (MEG) 7.0 before 7.0.4 and 7.5 before 7.5.1 allows remote authenticated users to execute arbitrary commands via unspecified vectors.

4.3

CVE-2012-4596

  • EPSS 0.26%
  • Veröffentlicht 22.08.2012 10:42:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Directory traversal vulnerability in McAfee Email Gateway (MEG) 7.0.0 and 7.0.1 allows remote authenticated users to bypass intended access restrictions and download arbitrary files via a crafted URL.

4.3

CVE-2012-4597

  • EPSS 0.3%
  • Veröffentlicht 22.08.2012 10:42:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to inject arbitrary web script or HTML via vectors re...