Vulnerabilities > Mcafee > Enterprise Mobility Manager > 4.7
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2012-08-22 | CVE-2012-4592 | Remote Security vulnerability in Mcafee Enterprise Mobility Manager 4.7 The Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not set the secure flag for the ASP.NET session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. | 5.0 |
| 2012-08-22 | CVE-2012-4591 | Information Exposure vulnerability in Mcafee Enterprise Mobility Manager 4.7 About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 discloses the name of the user account for an IIS worker process, which allows remote attackers to obtain potentially sensitive information by visiting this page. | 5.0 |
| 2012-08-22 | CVE-2012-4590 | Cross-Site Scripting vulnerability in Mcafee Enterprise Mobility Manager 4.7 Multiple cross-site scripting (XSS) vulnerabilities in About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 might allow remote attackers to inject arbitrary web script or HTML via the (1) User Agent or (2) Connection variable. | 4.3 |
| 2012-08-22 | CVE-2012-4589 | Unspecified vulnerability in Mcafee Enterprise Mobility Manager 4.7 Login.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation. | 2.1 |