CVE-2014-1472

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-01-16 · updated 2026-06-17
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Intel McAfee Vulnerability Manager (MVM): through 7.5.5; 7.0.11, 7.5.4

References

http://osvdb.org/101940
http://secunia.com/advisories/56394
http://www.securityfocus.com/bid/64795
http://www.securitytracker.com/id/1029591
https://exchange.xforce.ibmcloud.com/vulnerabilities/90244
https://kc.mcafee.com/corporate/index?page=content&id=SB10061
http://osvdb.org/101940
http://secunia.com/advisories/56394
http://www.securityfocus.com/bid/64795
http://www.securitytracker.com/id/1029591
https://exchange.xforce.ibmcloud.com/vulnerabilities/90244
https://kc.mcafee.com/corporate/index?page=content&id=SB10061

Get alerted when CVE-2014-1472 or the next vulnerability affects your stack