CVE-2020-7336

MEDIUM

McAfee Network Security Management < 9.2.9.55 - Cross-Site Request Forgery

Title source: llm
STIX 2.1

Description

Cross Site Request Forgery vulnerability in McAfee Network Security Management (NSM) prior to 10.1.7.35 and NSM 9.x prior to 9.2.9.55 may allow an attacker to change the configuration of the Network Security Manager via a carefully crafted HTTP request.

References (1)

Core 1
Core References

Scores

CVSS v3 6.6
EPSS 0.0017
EPSS Percentile 37.4%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H

Details

CWE
CWE-352
Status published
Products (1)
mcafee/network_security_management 9.0 - 9.2.9.55
Published Jan 05, 2021
Tracked Since Feb 18, 2026