title: SB10192 - Network Security Management (NSM) - Cross-Site Scripting (XSS) vulnerability
description: Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated users to allow arbitrary HTML code to be reflected in the response web page via crafted user input of attributes.
problem types: Cross-Site Scripting (XSS) vulnerability
affected:
{
platforms: x86
product: Network Security Management (NSM)
vendor: McAfee
versions:
lessThan: 8.2.7.42.2, status: affected, version: 8.2.7.42.2, versionType: custom
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 3.5
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L
version: 3.0
]