CVE-2013-5094
Cross-site scripting (XSS) vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows...
Cross-site scripting (XSS) vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inject arbitrary web script or HTML via the cert_cn cookie parameter.
Exploit likelihood
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inject arbitrary web script or HTML via the cert_cn cookie parameter.
- Record
CVE-2013-5094- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inject arbitrary web script or HTML via the cert_cn cookie parameter.
- Record
CVE-2013-5094- Updated
- 2026-11-02
EUVDEUVD-2013-4935 No score
Cross-site scripting (XSS) vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inject arbitrary web script or HTML via the cert_cn cookie parameter.
- Record
EUVD-2013-4935- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qw2v-r7p6-9wjv No score
Cross-site scripting (XSS) vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows...
Cross-site scripting (XSS) vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inject arbitrary web script or HTML via the cert_cn cookie parameter.
- Record
GHSA-qw2v-r7p6-9wjv- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | McAfee Vulnerability Manager - 'cert_cn' Cross-Site Scripting | 2013-03-08 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-5094 is a medium vulnerability (CVSS 4.3) in Mcafee Vulnerability Manager, published January 28, 2014. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.78%, the 78th percentile. No source names a fixed version.
References
packetstormsecurity.com/files/120721/McAfee-Vulnerability-Manager-7.5-Cross-Site-Scripting.html
tenable.com/plugins/index.php?view=single&id=65738
asheesh2000.blogspot.com/2013/08/mcafee-vulnerability-manager-75-cross.html
kc.mcafee.com/corporate/index?page=content&id=KB77772
securityfocus.com/bid/58401
nvd.nist.gov/vuln/detail/CVE-2013-5094
github.com/advisories/GHSA-qw2v-r7p6-9wjv