CVE-2014-1472

Published: Jan 16, 2014Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (3)

Products: Mcafee: Vulnerability Manager

Mcafee

1 product

Vulnerability Manager

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mcafee Vulnerability Manager	Up to 7.5.5
Mcafee Vulnerability Manager	Version 7.0.11
Mcafee Vulnerability Manager	Version 7.5.4

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (12)

http://osvdb.org/101940

Source: cve@mitre.org

http://secunia.com/advisories/56394

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/64795

Source: cve@mitre.org

http://www.securitytracker.com/id/1029591

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/90244

Source: cve@mitre.org

https://kc.mcafee.com/corporate/index?page=content&id=SB10061

Source: cve@mitre.org

Vendor Advisory

http://osvdb.org/101940