CVE-2017-3967

—

CVSS 3.0

6.1 medium

EPSS

<1%p53

Published

Apr 4, 2018 (Apr 4, 2018)

Modified

Jun 17, 2026

Description

Target influence via framing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to inject arbitrary web script or HTML via application pages inability to break out of 3rd party HTML frames.

Vendors: mcafee
Products: network security manager
Weakness: CWE-94
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.