CVE-2020-7268

4.3 mediumEPSS 1.0%

Medium (4.3) in mcafee email gateway. EPSS 1.0% chance of exploitation in the next 30 days.

Path Traversal vulnerability in McAfee McAfee Email Gateway (MEG) prior to 7.6.406 allows remote attackers to traverse the file system to access files or directories that are outside of the restricted directory via external input to construct a path name that should be within a restricted directory.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2020-09-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mcafee:email_gateway

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10323
https://kc.mcafee.com/corporate/index?page=content&id=SB10323

Check your stack JSON