Medium severity6.5NVD Advisory· Published Dec 3, 2019· Updated Jun 17, 2026

CVE-2019-3666

Description

API Abuse/Misuse vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to navigate to restricted websites via a carefully crafted web site.

Affected products

McAfee/Security Webadvisor
cpe:2.3:a:mcafee:webadvisor:*:*:*:*:*:*:*:*
Range: <4.1.1.48
McAfee/Web Advisorllm-fuzzy
Range: <4.1.1.48
McAfee, LLC/McAfee Web Advisor (WA)v5
Range: unspecified

Patches

Vulnerability mechanics

References

service.mcafee.com/FAQDocument.aspxnvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000