| Max CVSS | 7.7 | Min CVSS | 2.7 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2020-7297 | 2.7 |
Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected dashboard data via improper access control in the user interface.
|
01-07-2022 - 17:04 | 16-09-2020 - 00:15 | |
| CVE-2020-7293 | 7.7 |
Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access controls in the user interface.
|
06-01-2022 - 14:19 | 15-09-2020 - 23:15 | |
| CVE-2020-7296 | 2.7 |
Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected configuration files via improper access control in the user interface.
|
06-01-2022 - 14:19 | 15-09-2020 - 23:15 | |
| CVE-2020-7268 | 4.0 |
Path Traversal vulnerability in McAfee McAfee Email Gateway (MEG) prior to 7.6.406 allows remote attackers to traverse the file system to access files or directories that are outside of the restricted directory via external input to construct a path
|
06-01-2022 - 14:19 | 16-09-2020 - 02:15 | |
| CVE-2020-7295 | 4.1 |
Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the user interface.
|
06-01-2022 - 14:19 | 15-09-2020 - 23:15 | |
| CVE-2020-7294 | 4.1 |
Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected files via improper access controls in the REST interface.
|
01-01-2022 - 18:38 | 15-09-2020 - 23:15 | |
| CVE-2020-7292 | 4.3 |
Inappropriate Encoding for output context vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows a remote attacker to cause MWG to return an ambiguous redirect response via getting a user to click on a malicious URL.
|
17-09-2020 - 16:36 | 15-07-2020 - 15:15 |