VDB-12221 · CVE-2014-1472 · SB10061

McAfee Vulnerability Manager 7.5.5 cross site scripting

A vulnerability was found in McAfee Vulnerability Manager 7.5.5. It has been rated as problematic. This issue affects some unknown processing. Upgrading to version 7.0.11.05002_EM, 7.5.4.05007_EM or 7.5.5.05002_EM eliminates this vulnerability. Applying the patch SB10061 is able to eliminate this problem. The bugfix is ready for download at update.foundstone.com. The best possible mitigation is suggested to be upgrading to the latest version. A possible mitigation has been published before and not just after the disclosure of the vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

1	68
0	19

Field

exploit_price_0day	2
source_nessus_risk	1
vulnerability_cvss2_nvd_basescore	1
source_sectracker	1
source_openvas_family	1

Commit Conf

100%	65
90%	11
60%	5
80%	4
70%	2

Approve Conf

100%	65
90%	11
60%	5
80%	4
70%	2

ID	Commited	User	Field	Change	Remarks	Accepted	Reason	C
11315891	06/09/2021	VulD...	nessus_risk	Medium	tenable.com	06/09/2021	accepted	70
11315890	06/09/2021	VulD...	cvss2_nvd_basescore	4.3	nist.gov	06/09/2021	accepted	90
11315889	06/09/2021	VulD...	price_0day	$5k-$25k	see exploit price documentation	06/09/2021	accepted	90
11315888	06/09/2021	VulD...	sectracker	1029591	cve.mitre.org	06/09/2021	accepted	70
960151	05/19/2017	VulD...	openvas_family	General		05/19/2017	accepted	100
960150	05/19/2017	VulD...	openvas_title	McAfee Vulnerability Manager Multiple Vulnerabilities		05/19/2017	accepted	100
960149	05/19/2017	VulD...	openvas_filename	gb_mcafee_vm_mult_vuln.nasl		05/19/2017	accepted	100
960148	05/19/2017	VulD...	openvas_id	800619		05/19/2017	accepted	100
960147	05/19/2017	VulD...	nessus_date	1392768000 (02/19/2014)	tenable.com	05/19/2017	accepted	100
960146	05/19/2017	VulD...	nessus_family	Windows	tenable.com	05/19/2017	accepted	100
960145	05/19/2017	VulD...	nessus_filename	mcafee_vulnerability_manager_xss_vulns.nasl	tenable.com	05/19/2017	accepted	100
960144	05/19/2017	VulD...	nessus_name	McAfee Vulnerability Manager Enterprise Manager Multiple Vulnerabilities (SB10061)	tenable.com	05/19/2017	accepted	100
960142	05/19/2017	VulD...	xforce_risk	Medium Risk	ibmcloud.com	05/19/2017	accepted	100
960141	05/19/2017	VulD...	xforce_identifier	mcafee-vm-unspec-xss	ibmcloud.com	05/19/2017	accepted	100
960140	05/19/2017	VulD...	xforce_title	McAfee Vulnerability Manager cross-site scripting	ibmcloud.com	05/19/2017	accepted	100
960138	05/19/2017	VulD...	vulnerabilitycenter_reportingdate	1389830400	vulnerabilitycenter.com	05/19/2017	accepted	100
960137	05/19/2017	VulD...	vulnerabilitycenter_lastupdate	1393113600	vulnerabilitycenter.com	05/19/2017	accepted	100
960136	05/19/2017	VulD...	vulnerabilitycenter_creationdate	1390435200	vulnerabilitycenter.com	05/19/2017	accepted	100
960135	05/19/2017	VulD...	vulnerabilitycenter_severity	Medium	vulnerabilitycenter.com	05/19/2017	accepted	100
960134	05/19/2017	VulD...	vulnerabilitycenter_title	McAfee Vulnerability Manager <=7.5.5 Remote XSS Vulnerability	vulnerabilitycenter.com	05/19/2017	accepted	100