CVE-2017-3967

6.1 mediumEPSS 0.7%

Medium (6.1) in mcafee network security manager. EPSS 0.7% chance of exploitation in the next 30 days.

Target influence via framing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to inject arbitrary web script or HTML via application pages inability to break out of 3rd party HTML frames.

Severity

CVSS 3.0

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2018-04-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mcafee:network_security_manager

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10192
https://kc.mcafee.com/corporate/index?page=content&id=SB10192

Check your stack JSON