CVE-2019-3660high

CVE-2019-3660: high-severity vulnerability in McAfee Advanced Threat Defense (ATD)

Advanced Threat Defense (ATD) - Improper Neutralization of HTTP requests

Published · Updated

Follow this CVE+ Monitor Advanced Threat Defense

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.4epss 1.2%
Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute commands on the server remotely via carefully constructed HTTP requests.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:H
Affected products
McAfee · Advanced Threat Defense (ATD)
Related CVEs — McAfee Advanced Threat Defense (ATD)

In the same product, most dangerous first.

CVE-2017-4053—CVE-2017-4053EPSS 3.4%CVE-2017-4054—CVE-2017-4054EPSS 2.6%CVE-2017-4052—CVE-2017-4052EPSS 2.5%CVE-2019-3662MEDIUMAdvanced Threat Defense (ATD) - Path Traversal: '/absolute/pathname/here' vulnerabilityEPSS 1.4%CVE-2017-4055—CVE-2017-4055EPSS 1.4%CVE-2017-4057—CVE-2017-4057EPSS 1.2%