Vulnerability Database

309,961

Total vulnerabilities in the database

CVE-2020-7294

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected files via improper access controls in the REST interface.

  • Published: Sep 15, 2020
  • Updated: Nov 16, 2025
  • CVE: CVE-2020-7294
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.6
  • AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

CVSS v2:

  • Severity: Low
  • Score: 4.1
  • AV:A/AC:L/Au:S/C:P/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
mcafee / web_gateway 7.8.0 7.8.2.23
mcafee / web_gateway 8.2.0 8.2.11
mcafee / web_gateway 9.0.0 9.2.3