VULNERABILITY INTELLIGENCE
CVE-2017-3965
CVSS score8.8 HIGH
EPSS probability0.54%
CISA KEVNot currently listed
Published2018-04-04
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to perform unauthorized tasks such as retrieving internal system information or manipulating the database via specially crafted URLs.
Weakness classification
- CWE-352: Cross-Site Request Forgery (CSRF)