Critical severity10.0NVD Advisory· Published Jun 26, 2018· Updated Jun 17, 2026

CVE-2018-6667

Description

Authentication Bypass vulnerability in the administrative user interface in McAfee Web Gateway 7.8.1.0 through 7.8.1.5 allows remote attackers to execute arbitrary code via Java management extensions (JMX).

Affected products

McAfee/Web Gatewayllm-fuzzy2 versions
7.8.1.0 through 7.8.1.5+ 1 more
- (no CPE)range: 7.8.1.0 through 7.8.1.5
- (no CPE)range: 7.8.1.0

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/104564nvd
www.securitytracker.com/id/1041129nvd
kc.mcafee.com/corporate/indexnvd

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000