CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.8. It may be remotely exploitable.
CVE
CVE-2021-4038
Severity
MEDIUM
CVSS
4.8
EPSS
0.57%
Original NVD Description
Cross Site Scripting (XSS) vulnerability in McAfee Network Security Manager (NSM) prior to 10.1 Minor 7 allows a remote authenticated administrator to embed a XSS in the administrator interface via specially crafted custom rules containing HTML. NSM did not correctly sanitize custom rule content in all scenarios.
Related CVEs
Other vulnerabilities affecting the same vendor(s)