Lucene search
TrellixCVELIST:CVE-2020-7336HistoryJan 05, 2021 - 11:10 p.m.
CVE-2020-7336 Network Security Management (NSM) - Cross Site Request Forgery vulnerability
2021-01-0523:10:17
CWE-352
trellix
www.cve.org
7
cve-2020-7336
network security management
cross site request forgery
CVSS3
6.6
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H
EPSS
0.002
Percentile
61.3%
Cross Site Request Forgery vulnerability in McAfee Network Security Management (NSM) prior to 10.1.7.35 and NSM 9.x prior to 9.2.9.55 may allow an attacker to change the configuration of the Network Security Manager via a carefully crafted HTTP request.
CNA Affected
[
{
"product": "Network Security Management (NSM)",
"vendor": "McAfee",
"versions": [
{
"lessThan": "10.1.7.35",
"status": "affected",
"version": "NSM 10.x",
"versionType": "custom"
},
{
"lessThan": "9.2.9.55",
"status": "affected",
"version": "NSM 9.x",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2020-7336
2021-01-05 23:15:15
cve
cve
CVE-2020-7336
2021-01-05 23:15:15
prion
prion
Cross site request forgery (csrf)
2021-01-05 23:15:00
CVSS3
6.6
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H
EPSS
0.002
Percentile
61.3%
Related for CVELIST:CVE-2020-7336