Unscored CVE-2005-2186 EUVD-2005-2187GHSA-5638-47w9-74r6

Multiple cross-site scripting (XSS) vulnerabilities in McAfee IntruShield Security Management System allow remote authenticated users to in…

Published Jul 10, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in McAfee IntruShield Security Management System allow remote authenticated users to inject arbitrary web script or HTML via the (1) thirdMenuName or (2) resourceName parameter to SystemEvent.jsp.

References

20050706 Re: Re: McAfee Intrushield IPS Abuse mailing-list
1014422 vdb-entry
15961 third-party-advisory
20050706 McAfee Intrushield IPS Abuse mailing-list