CVE-2014-1473

CVE-2014-1473

EPSS 0.7%

Multiple cross-site request forgery (CSRF) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow remote attackers to hijack the authentication of users for requests that modify HTML via unspecified vectors related to the "response web page."

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/101939 http://secunia.com/advisories/56394 https://exchange.xforce.ibmcloud.com/vulnerabilities/90245 https://kc.mcafee.com/corporate/index?page=content&id=SB10061 http://www.securityfocus.com/bid/64795 http://www.securitytracker.com/id/1029591