CVE-2013-5094 in Vulnerability Manager

Summary

Cross-site scripting (XSS) vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inject arbitrary web script or HTML via the cert_cn cookie parameter.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

08/09/2013

Disclosure

01/28/2014

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
66230	McAfee Vulnerability Manager cross site scripting	79	Proof-of-Concept	Not defined	CVE-2013-5094
7948	McAfee Vulnerability Manager cross site scripting	79	Proof-of-Concept	Official fix	CVE-2013-5094

Sources

• MITRE
• NVD
• CVE Details