VULNERABILITY INTELLIGENCE
CVE-2017-3967
CVSS score6.1 MEDIUM
EPSS probability0.73%
CISA KEVNot currently listed
Published2018-04-04
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H
Description
Target influence via framing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to inject arbitrary web script or HTML via application pages inability to break out of 3rd party HTML frames.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')