Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2012-08-22	CVE-2012-4592	Remote Security vulnerability in Mcafee Enterprise Mobility Manager 4.7 The Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not set the secure flag for the ASP.NET session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. network low complexity mcafee	5.0
2012-08-22	CVE-2012-4591	Information Exposure vulnerability in Mcafee Enterprise Mobility Manager 4.7 About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 discloses the name of the user account for an IIS worker process, which allows remote attackers to obtain potentially sensitive information by visiting this page. network low complexity mcafee CWE-200	5.0
2012-08-22	CVE-2012-4590	Cross-Site Scripting vulnerability in Mcafee Enterprise Mobility Manager 4.7 Multiple cross-site scripting (XSS) vulnerabilities in About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 might allow remote attackers to inject arbitrary web script or HTML via the (1) User Agent or (2) Connection variable. network mcafee CWE-79	4.3
2012-08-22	CVE-2012-4588	Credentials Management vulnerability in Mcafee products McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1 record all invalid usernames presented in failed login attempts, and place them on a list of accounts that an administrator may wish to unlock, which allows remote attackers to cause a denial of service (excessive list size in the EMM Database) via a long sequence of login attempts with different usernames. network mcafee CWE-255	4.3