McAfee Email Gateway Secure Web Mail Client Cross Site Scripting Vulnerability
BID:73420
Info
McAfee Email Gateway Secure Web Mail Client Cross Site Scripting Vulnerability
| Bugtraq ID: | 73420 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-1619 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 20 2015 12:00AM |
| Updated: | Jan 20 2015 12:00AM |
| Credit: | François Goichon from Context Information Security. |
| Vulnerable: |
McAfee Email Gateway 7.6.3 McAfee Email Gateway 7.0.4 McAfee Email Gateway 7.0.2 McAfee Email Gateway 7.6.1 McAfee Email Gateway 7.6 McAfee Email Gateway 7.0.5 McAfee Email Gateway 7.0.3 McAfee Email Gateway 7.0.1 McAfee Email Gateway 7.0 McAfee Email Gateway 5.6.0 |
| Not Vulnerable: |
McAfee Email Gateway 7.6.3.2 McAfee Email Gateway 7.5.6 McAfee Email Gateway 7.0.5h1021346 McAfee Email Gateway 5.6h1021351 |
Exploit / POC
McAfee Email Gateway Secure Web Mail Client Cross Site Scripting Vulnerability
Attackers can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
Attackers can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
Solution / Fix
McAfee Email Gateway Secure Web Mail Client Cross Site Scripting Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.