← Back

Asset Manager

asset_manager

Vendor: Mcafee • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-2588
1Mcafee
1Asset Manager
May 6, 2026
Mar 24, 2014
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Directory traversal vulnerability in servlet/downloadReport in McAfee Asset Manager 6.6 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the reportFileName parameter.
CVE-2014-2587
1Mcafee
1Asset Manager
May 6, 2026
Mar 24, 2014
N/A· v4
N/A· v3
6.5 MEDIUM· v2
SQL injection vulnerability in jsp/reports/ReportsAudit.jsp in McAfee Asset Manager 6.6 allows remote authenticated users to execute arbitrary SQL commands via the username of an audit report (aka user parameter).