CVE-2019-3670: Remote Code Execution vulnerability

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-02-24 · updated 2026-06-17
Weakness: CWE-79

Description

Remote Code Execution vulnerability in the web interface in McAfee Web Advisor (WA) 8.0.34745 and earlier allows remote unauthenticated attacker to execute arbitrary code via a cross site scripting attack.

Affected products

McAfee, LLC Web Advisor (WA): through 8.0.34745; through 8.0.0.34239

References

https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS103008
https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS103008

Get alerted when CVE-2019-3670 or the next vulnerability affects your stack