What’s Vulnerable › Vulnerabilities

CVE-2018-6682: True Key (TK) - Cross Site Scripting Exposure

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-09-24 · updated 2026-06-17
• Weakness: CWE-79

Description

Cross Site Scripting Exposure in McAfee True Key (TK) 4.0.0.0 and earlier allows local users to expose confidential data via a crafted web site.

Affected products

• McAfee True Key: through 4.0.0.0

References

• https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102825
• https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102825

Get alerted when CVE-2018-6682 or the next vulnerability affects your stack