{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-02T06:58:01.369","vulnerabilities":[{"cve":{"id":"CVE-2020-7336","sourceIdentifier":"trellixpsirt@trellix.com","published":"2021-01-05T23:15:15.437","lastModified":"2026-06-17T03:24:44.407","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross Site Request Forgery vulnerability in McAfee Network Security Management (NSM) prior to 10.1.7.35 and NSM 9.x prior to 9.2.9.55 may allow an attacker to change the configuration of the Network Security Manager via a carefully crafted HTTP request."},{"lang":"es","value":"Una vulnerabilidad de tipo Cross Site Request Forgery en McAfee Network Security Management (NSM) versiones anteriores a 10.1.7.35 y NSM versiones 9.x anteriores a 9.2.9.55, puede permitir a un atacante cambiar la configuración de Network Security Manager por medio de una petición HTTP cuidadosamente diseñada"}],"affected":[{"source":"trellixpsirt@trellix.com","affectedData":[{"vendor":"McAfee","product":"Network Security Management (NSM)","versions":[{"version":"NSM 10.x","lessThan":"10.1.7.35","versionType":"custom","status":"affected"},{"version":"NSM 9.x","lessThan":"9.2.9.55","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"trellixpsirt@trellix.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.1,"impactScore":4.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"trellixpsirt@trellix.com","type":"Secondary","description":[{"lang":"en","value":"CWE-352"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:network_security_management:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0","versionEndExcluding":"9.2.9.55","matchCriteriaId":"D494C16E-EC29-4191-8D44-F04B2C54F44C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:network_security_management:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0","versionEndExcluding":"10.1.7.35","matchCriteriaId":"9A631F7A-0DC1-435B-959B-D420358217BD"}]}]}],"references":[{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10341","source":"trellixpsirt@trellix.com","tags":["Broken Link"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}}]}