Read the docs

McAfee

Records603All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical42CVSS 9.0–10.0
CVSS high223CVSS 7.0–8.9

Exploited now

McAfee records in CISA KEV
TI-2021-02242 Sudo Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2022-04-06TI-2021-06229 McAfee Total Protection (MTP) Improper Privilege Management Vulnerability Priority CRITICAL 95KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Epolicy Orchestrator 86 records HIGH Web Gateway 41 records CRITICAL Endpoint Security 37 records LOW Network Data Loss Prevention 31 records HIGH Virusscan Enterprise 29 records MEDIUM Advanced Threat Defense 26 records MEDIUM Data Loss Prevention Endpoint 26 records LOW Total Protection 26 records CRITICAL

Records

10 records in Email And Web Security · all components

TI-2012-03922 CVE-2012-4582 · GHSA-jx35-69vw-mrr7

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and…

Priority LOW 24

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to reset the passwords of arbitrary administrative a…

CVSS 2.0MEDIUM 4.9 Network Low privileges Interaction — EPSS 0.00852 Published 2012-08-22 No fix listed CWE-264
TI-2012-03920 CVE-2012-4580 · GHSA-m5fq-8mpw-4wc6

Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.x…

Priority LOW 23

Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote attackers to inject arbitrar…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01384 Published 2012-08-22 No fix listed CWE-79
TI-2012-03937 CVE-2012-4597 · GHSA-56q8-wv5h-r272

Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.5…

Priority LOW 22

Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to inject arbitrary web…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01148 Published 2012-08-22 No fix listed CWE-79
TI-2012-03923 CVE-2012-4583 · GHSA-gw82-2395-v94j

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and…

Priority LOW 21

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to obtain the session tokens of arbitrary users by n…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.00937 Published 2012-08-22 No fix listed CWE-200
TI-2012-03926 CVE-2012-4586 · GHSA-92cx-5wrj-5pgx

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and…

Priority LOW 19

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, accesses files with the privileges of the root user, which allows remote authenticated…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00915 Published 2012-08-22 No fix listed CWE-264
TI-2012-03924 CVE-2012-4584 · GHSA-fr8v-wj33-r9jw

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and…

Priority LOW 18

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not properly encrypt system-backup data, which makes it easier for remote authent…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00852 Published 2012-08-22 No fix listed CWE-310
Open these records in search →