LiveActive security incident?Get immediate response
CVE Record

CVE-2017-3961: SB10192 - Network Security Management (NSM) - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated users to allow arbitrary HTML code to be reflected in the response web page via crafted user input of attributes.

LowCVSS 3.5Not KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysislow

Security readout for executives and security teams

Plain-English summary

McAfee Network Security Management had a low-severity web interface flaw that could reflect attacker-supplied HTML back into a page. Exploitation requires an authenticated user and user interaction, limiting broad business impact. The main concern is integrity or availability disruption inside an already accessible NSM administrative environment.

Executive priority

Treat as a routine maintenance issue unless NSM is broadly reachable or has weak account governance. Prioritize patch verification and management-plane access controls, but this does not warrant emergency response based on the provided evidence.

Technical view

CVE-2017-3961 is reflected cross-site scripting in McAfee NSM before 8.2.7.42.2. The CVSS 3.0 vector is AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L, scored 3.5. The source describes crafted attribute input causing arbitrary HTML to be reflected in the response page.

Likely exposure

Exposure is likely limited to organizations running McAfee NSM versions before 8.2.7.42.2 with authenticated access to the web interface. Internet exposure is not stated in the sources and should not be assumed.

Exploitation context

The provided sources do not show CISA KEV listing or active exploitation. Practical exploitation requires authenticated access and user interaction, so risk depends heavily on who can log into NSM and reach the management web interface.

Researcher notes

The record lacks CWE entries and detailed exploit conditions beyond reflected arbitrary HTML through crafted attribute input. The source bundle’s affected entry lists 8.2.7.42.2, while the description says versions before 8.2.7.42.2 are vulnerable; validate against McAfee SB10192.

Mitigation direction

  • Check McAfee SB10192 for exact fixed-build guidance.
  • Upgrade NSM to 8.2.7.42.2 or a later vendor-supported release.
  • Restrict NSM web interface access to trusted administration networks.
  • Limit NSM accounts to necessary privileged users only.
  • Monitor authenticated NSM web activity for abnormal administrative behavior.

Validation and detection

  • Inventory deployed McAfee NSM versions.
  • Confirm no NSM instance runs below 8.2.7.42.2.
  • Verify NSM web access is restricted to trusted networks.
  • Review logs for unusual authenticated web-interface activity.
  • Confirm remediation against McAfee advisory SB10192.
Prepared
Confidence
medium
Sources
3

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2017-3961 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Low
CVSS
3.5 (3.0)
Known Exploited
No
Published

Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L

Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

1CVSS vectors
0Timeline events
0ADP providers
2Source links

CVSS vector scores

1 official score

We collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.

ScoreVersionSeverityVectorExploitImpactSource
3.5CVSS 3.0LowCVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L0.92.5Primary CVE score

Vulnerability scoring details

Base CVSS 3.0 score

3.5Low
CVSS 3.0 vector shape for CVE-2017-3961Attack VectorAttack ComplexityPrivileges RequiredUser InteractionScopeConfidentiality ImpactIntegrity ImpactAvailability Impact

Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L

Attack Vector
NetworkAdjacentLocalPhysical
Attack Complexity
LowHigh
Privileges Required
NoneLowHigh
User Interaction
NoneRequired
Scope
ChangedUnchanged
Confidentiality Impact
HighLowNone
Integrity Impact
HighLowNone
Availability Impact
HighLowNone

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
McAfeeNetwork Security Management (NSM)8.2.7.42.2Listed
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.