CVE-2017-3964

CVE-2017-3964 describes a reflective Cross-Site Scripting (XSS) vulnerability in McAfee Network Security Management (NSM) versions prior to 8.2.7.42.2. This flaw allows an authenticated attacker to inject malicious web scripts or HTML through a URL parameter, which would then execute in the victim's browser. The vulnerability has a CVSS score of 5.4 (Medium), indicating a moderate risk. Exploitation requires user interaction (UI:R) and low privileges (PR:L), but the attack complexity is low (AC:L). Successful exploitation could lead to limited confidentiality and integrity impacts (C:L, I:L). There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. The vulnerability has received minimal community discussion or media coverage, suggesting a low level of public awareness and attention.