mcafee network security manager

Name: mcafee network security manager
Brand: mcafee

productUS

cpe:2.3:a:mcafee:network_security_manager:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

4critical2high13medium0low

updated 2026-10-28

vulnerabilities (19)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-3968US	critical9.1	1.50% (74th)	—	8.2.7.42.2	2018-06-13	< 8.2.7.42.2
CVE-2017-3972US	critical9.8	1.48% (74th)	—	8.2.7.42.2	2018-04-03	< 8.2.7.42.2
CVE-2019-3597US	critical9.8OT elevated	1.12% (66th)	—	9.2.7.31	2019-03-26	2 versions
CVE-2017-3960US	high8.8	0.90% (60th)	—	8.2.7.42.2	2018-06-12	< 8.2.7.42.2
CVE-2017-3969US	medium5.9	0.80% (56th)	—	8.2.7.42.2	2018-04-04	< 8.2.7.42.2
CVE-2017-3967US	medium6.1	0.73% (54th)	—	8.2.7.42.2	2018-04-04	< 8.2.7.42.2
CVE-2014-2390US	medium6.8	0.71% (53rd)	—	7.1.5.15	2014-08-29	5 versions
CVE-2017-3966US	medium6.3	0.67% (52nd)	—	8.2.7.42.2	2018-04-04	< 8.2.7.42.2
CVE-2019-3602US	medium4.8	0.62% (50th)	—	9.1	2019-05-15	2 versions
CVE-2017-3961US	medium5.4	0.61% (49th)	—	8.2.7.42.2	2018-05-25	< 8.2.7.42.2
CVE-2017-3964US	medium5.4	0.59% (48th)	—	8.2.7.42.2	2018-04-04	< 8.2.7.42.2
CVE-2021-4038US	medium4.8	0.59% (48th)	—	10.1.7.48	2021-12-09	< 10.1.7.48
CVE-2017-3965US	high8.8	0.54% (45th)	—	8.2.7.42.2	2018-04-04	< 8.2.7.42.2
CVE-2020-7258US	medium4.8	0.52% (44th)	—	9.1.7.80	2020-03-18	< 9.1.7.80
CVE-2020-7256US	medium4.8	0.52% (44th)	—	9.1.7.80	2020-03-18	< 9.1.7.80
CVE-2018-6681US	medium5.4	0.50% (42nd)	—	no fix	2018-07-17	≤ 9.1.7.11
CVE-2017-3962US	critical9.8	0.35% (29th)	—	8.2.7.42.2	2018-06-12	< 8.2.7.42.2
CVE-2017-3971US	medium6.5	0.31% (24th)	—	8.2.7.42.2	2018-04-04	< 8.2.7.42.2
CVE-2019-3606US	medium4.1OT elevated	0.21% (11th)	—	9.1.7.75	2019-03-26	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-312Cleartext Storage of Sensitive Information1 CVEs
CWE-326Inadequate Encryption Strength1 CVEs
CWE-384Session Fixation1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.