Test ID:	1.3.6.1.4.1.25623.1.0.805290
Category:	General
Title:	McAfee Email Gateway Secure Web Mail Client UI Cross-Site Scripting Vulnerability
Summary:	McAfee Email Gateway is prone to a cross-site scripting (XSS) vulnerability.
Description:	Summary: McAfee Email Gateway is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The flaw exists due to the Secure Web Mail Client UI does not validate input to certain tokens in digest messages before returning it to users. Vulnerability Impact: Successful exploitation will allow remote attackers to create a specially crafted request that would execute arbitrary script code in a user's browser session within the trust relationship between their browser and the server. Affected Software/OS: McAfee Email Gateway 7.6.x before 7.6.3.2, 7.5.x before 7.5.6, 7.0.x through 7.0.5, 5.6 and prior. Solution: Upgrade to McAfee Email Gateway 7.6.3.2 or 7.5.6 or 7.0.5h1021346 or 5.6h1021351 or later. CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1619
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.