VULNERABILITY INTELLIGENCE

CVE-2020-7336

CVSS score6.6 MEDIUM
EPSS probability0.53%
CISA KEVNot currently listed
Published2021-01-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H

Description

Cross Site Request Forgery vulnerability in McAfee Network Security Management (NSM) prior to 10.1.7.35 and NSM 9.x prior to 9.2.9.55 may allow an attacker to change the configuration of the Network Security Manager via a carefully crafted HTTP request.

Weakness classification

  • trellixpsirt@trellix.com: CWE-352
  • nvd@nist.gov: CWE-352

Primary references