CVE-2019-3665

—

CVSS 3.1

6.5 medium

EPSS

<1%p59

Published

Dec 3, 2019 (Dec 3, 2019)

Modified

Jun 17, 2026

Description

Code Injection vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to render a website which Web Advisor would normally have blocked via a carefully crafted web site.

Vendors: mcafee
Products: webadvisor
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.