VYPR
← All advisories
High severity7.1NVD Advisory· Published Aug 14, 2019· Updated Jun 17, 2026

CVE-2019-3639

CVE-2019-3639

Description

Clickjack vulnerability in Adminstrator web console in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows remote attackers to conduct clickjacking attacks via a crafted web page that contains an iframe via does not send an X-Frame-Options HTTP header.

Affected products

3
  • McAfee/Web Gateway2 versions
    cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*range: >=7.8.2.0,<7.8.2.12
    • (no CPE)range: <7.8.2.12
  • McAfee, LLC/McAfee Web Gateway (MWG)v5
    Range: 7.8.2.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.