VULNERABILITY INTELLIGENCE
CVE-2015-2053
CVSS score4.3 MEDIUM
EPSS probability1.46%
CISA KEVNot currently listed
Published2015-02-23
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Description
The log viewer in McAfee Agent (MA) before 4.8.0 Patch 3 and 5.0.0, when the "Accept connections only from the ePO server" option is disabled, allows remote attackers to conduct clickjacking attacks via a crafted web page, aka an "http-generic-click-jacking" vulnerability.
Weakness classification
- CWE-20: Improper Input Validation