Mcafee

Email And Web Security

10 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2012-4014

  • EPSS 0.45%
  • Veröffentlicht 25.09.2012 11:07:47
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Unspecified vulnerability in McAfee Email Anti-virus (formerly WebShield SMTP) allows remote attackers to cause a denial of service via unknown vectors.

7.5

CVE-2012-4595

  • EPSS 0.35%
  • Veröffentlicht 22.08.2012 10:42:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to bypass authentication and obtain an admin session ID via unspecified vectors.

4.3

CVE-2012-4597

  • EPSS 0.3%
  • Veröffentlicht 22.08.2012 10:42:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to inject arbitrary web script or HTML via vectors re...

4.3

CVE-2012-4580

  • EPSS 0.26%
  • Veröffentlicht 22.08.2012 10:42:04
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote attackers to inject arbitrary web script or HTML via vecto...

6.8

CVE-2012-4581

  • EPSS 0.37%
  • Veröffentlicht 22.08.2012 10:42:04
  • Zuletzt bearbeitet 11.04.2025 00:51:21

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not disable the server-side session token upon the closing of the Management Console/Dashboard, which makes it ...

4.9

CVE-2012-4582

  • EPSS 0.16%
  • Veröffentlicht 22.08.2012 10:42:04
  • Zuletzt bearbeitet 11.04.2025 00:51:21

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to reset the passwords of arbitrary administrative accounts via unspecified vector...

4

CVE-2012-4583

  • EPSS 0.16%
  • Veröffentlicht 22.08.2012 10:42:04
  • Zuletzt bearbeitet 11.04.2025 00:51:21

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to obtain the session tokens of arbitrary users by navigating within the Dashboard...

3.5

CVE-2012-4584

  • EPSS 0.16%
  • Veröffentlicht 22.08.2012 10:42:04
  • Zuletzt bearbeitet 11.04.2025 00:51:21

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not properly encrypt system-backup data, which makes it easier for remote authenticated users to obtain sensiti...

4

CVE-2012-4585

  • EPSS 0.16%
  • Veröffentlicht 22.08.2012 10:42:04
  • Zuletzt bearbeitet 11.04.2025 00:51:21

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to read arbitrary files via a crafted URL.

3.5

CVE-2012-4586

  • EPSS 0.16%
  • Veröffentlicht 22.08.2012 10:42:04
  • Zuletzt bearbeitet 11.04.2025 00:51:21

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, accesses files with the privileges of the root user, which allows remote authenticated users to bypass intended perm...