CVE-2019-3632
HIGHMcAfee Enterprise Security Manager < 10.4.0 - Authenticated Path Traversal
Title source: llmDescription
Directory Traversal vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to gain elevated privileges via specially crafted input.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://kc.mcafee.com/corporate/index?page=content&id=SB10284
Scores
CVSS v3
8.8
EPSS
0.0168
EPSS Percentile
82.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-22
Status
published
Products (1)
mcafee/enterprise_security_manager
< 10.4.0
Published
Jun 27, 2019
Tracked Since
Feb 18, 2026