[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYzOEaOS7RFSlEuEy5AOEFBaGEorekw7SbWFDUTY68Eo":3,"g5a-ex:mcafee\u002Femail_and_web_security@*":101,"g5a-family:mcafee\u002Femail_and_web_security":103},{"success":4,"data":5},true,{"product":6,"versions":23,"topVulnerabilitiesByEpss":27,"kevVulnerabilities":78,"seoMetadata":79,"meta":98},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":22},"mcafee","email_and_web_security",3,10,0,"2012-09-25",[14,18,20],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"5.0",8,false,{"version":19,"cve_count":10,"kev_count":11,"has_kev":17},"5.5",{"version":21,"cve_count":10,"kev_count":11,"has_kev":17},"5.6","Email And Web Security by Mcafee is a technology product with 3 tracked versions and 10 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[24,25,26],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":10,"kev_count":11,"has_kev":17},{"version":21,"cve_count":10,"kev_count":11,"has_kev":17},[28,36,41,47,52,56,61,64,70,74],{"cveId":29,"description":30,"publishedDate":31,"cvssScore":32,"cvssVersion":33,"severity":34,"isKev":17,"epssScore":35},"CVE-2012-4595","McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to bypass authentication and obtain an admin session ID via unspecified vectors.","2012-08-22",7.5,"v2","High",0.02525,{"cveId":37,"description":38,"publishedDate":12,"cvssScore":39,"cvssVersion":33,"severity":34,"isKev":17,"epssScore":40},"CVE-2012-4014","Unspecified vulnerability in McAfee Email Anti-virus (formerly WebShield SMTP) allows remote attackers to cause a denial of service via unknown vectors.",7.8,0.01895,{"cveId":42,"description":43,"publishedDate":31,"cvssScore":44,"cvssVersion":33,"severity":45,"isKev":17,"epssScore":46},"CVE-2012-4580","Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote attackers to inject arbitrary web script or HTML via vectors related to the McAfee Security Appliance Management Console\u002FDashboard.",4.3,"Medium",0.01384,{"cveId":48,"description":49,"publishedDate":31,"cvssScore":50,"cvssVersion":33,"severity":45,"isKev":17,"epssScore":51},"CVE-2012-4581","McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not disable the server-side session token upon the closing of the Management Console\u002FDashboard, which makes it easier for remote attackers to hijack sessions by capturing a session cookie and then modifying the response to a login attempt, related to a \"Logout Failure\" issue.",6.8,0.01209,{"cveId":53,"description":54,"publishedDate":31,"cvssScore":44,"cvssVersion":33,"severity":45,"isKev":17,"epssScore":55},"CVE-2012-4597","Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to the McAfee Security Appliance Management Console\u002FDashboard.",0.01148,{"cveId":57,"description":58,"publishedDate":31,"cvssScore":59,"cvssVersion":33,"severity":45,"isKev":17,"epssScore":60},"CVE-2012-4585","McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to read arbitrary files via a crafted URL.",4,0.00937,{"cveId":62,"description":63,"publishedDate":31,"cvssScore":59,"cvssVersion":33,"severity":45,"isKev":17,"epssScore":60},"CVE-2012-4583","McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to obtain the session tokens of arbitrary users by navigating within the Dashboard.",{"cveId":65,"description":66,"publishedDate":31,"cvssScore":67,"cvssVersion":33,"severity":68,"isKev":17,"epssScore":69},"CVE-2012-4586","McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, accesses files with the privileges of the root user, which allows remote authenticated users to bypass intended permission settings by requesting a file.",3.5,"Low",0.00915,{"cveId":71,"description":72,"publishedDate":31,"cvssScore":67,"cvssVersion":33,"severity":68,"isKev":17,"epssScore":73},"CVE-2012-4584","McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not properly encrypt system-backup data, which makes it easier for remote authenticated users to obtain sensitive information by reading a backup file, as demonstrated by obtaining password hashes.",0.00852,{"cveId":75,"description":76,"publishedDate":31,"cvssScore":77,"cvssVersion":33,"severity":45,"isKev":17,"epssScore":73},"CVE-2012-4582","McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to reset the passwords of arbitrary administrative accounts via unspecified vectors.",4.9,[],{"title":80,"metaDescription":81,"keywords":82,"structuredData":83},"Email And Web Security by Mcafee - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Email And Web Security by Mcafee covering 3 versions with 10 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Email And Web Security vulnerabilities, Email And Web Security security, Email And Web Security CVE, Mcafee Email And Web Security, Email And Web Security threat intelligence, Mcafee security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":84,"@type":85,"name":86,"description":81,"url":87,"manufacturer":88,"applicationCategory":92,"softwareVersion":93,"mainEntity":94},"https:\u002F\u002Fschema.org","SoftwareApplication","Email And Web Security","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmcafee\u002Femail_and_web_security",{"@type":89,"name":90,"url":91},"Organization","Mcafee","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmcafee","Security Software","3 versions tracked",{"@type":95,"name":96,"description":97,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Email And Web Security Security Vulnerabilities","Security vulnerabilities affecting Email And Web Security by Mcafee",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":99,"apiVersion":100},"2026-10-18T18:11:33.907Z","3.0",{"rows":102,"total":11,"capped":17,"failed":11},[],[104],{"product":105,"cves":106},"email_and_web_security_appliance",1]