CVE-2019-3639

—

CVSS 3.0

7.1 high

EPSS

1%p67

Published

Aug 14, 2019 (Aug 14, 2019)

Modified

Jun 17, 2026

Description

Clickjack vulnerability in Adminstrator web console in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows remote attackers to conduct clickjacking attacks via a crafted web page that contains an iframe via does not send an X-Frame-Options HTTP header.

Vendors: mcafee
Products: web gateway
Weakness: CWE-1021
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.