Read the docs

McAfee

Records603All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical42CVSS 9.0–10.0
CVSS high223CVSS 7.0–8.9

Exploited now

McAfee records in CISA KEV
TI-2021-02242 Sudo Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2022-04-06TI-2021-06229 McAfee Total Protection (MTP) Improper Privilege Management Vulnerability Priority CRITICAL 95KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Epolicy Orchestrator 86 records HIGH Web Gateway 41 records CRITICAL Endpoint Security 37 records LOW Network Data Loss Prevention 31 records HIGH Virusscan Enterprise 29 records MEDIUM Advanced Threat Defense 26 records MEDIUM Data Loss Prevention Endpoint 26 records LOW Total Protection 26 records CRITICAL

Records

9 records in Enterprise Security Manager · all components

TI-2019-02675 CVE-2019-3632 · GHSA-whx8-wpqc-46g5

Directory Traversal vulnerability could lead to elevated privileges

Priority MEDIUM 41

Directory Traversal vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to gain elevated privileges via specially crafted input.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0168 Published 2019-06-27 Fixed in 11.2.0, 10.4.0 CWE-22
TI-2019-02686 CVE-2019-3644 · GHSA-94m5-m65q-7w34

MWG scanners updated to address CVE-2019-9517

Priority LOW 37

McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0239 Published 2019-09-11 Fixed in 7.8.2.13
TI-2019-02685 CVE-2019-3643 · GHSA-jjmf-77v6-6356

MWG scanners updated to address CVE-2019-9511

Priority LOW 37

McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, potentially leading to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0239 Published 2019-09-11 Fixed in 7.8.2.13
TI-2019-02674 CVE-2019-3631 · GHSA-mrpg-fqx4-3xf2

Command Injection could allow authenticated users to execute arbitrary code

Priority LOW 36

Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary code via specially crafted parameters.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02009 Published 2019-06-27 Fixed in 11.2.0, 10.4.0 CWE-78
TI-2019-02673 CVE-2019-3630 · GHSA-8f8r-5c27-46fh

Command Injection could allow authenticated users to execute arbitrary code

Priority LOW 36

Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary code via specially crafted parameters.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02009 Published 2019-06-27 Fixed in 11.2.0, 10.4.0 CWE-78
TI-2019-02672 CVE-2019-3629 · GHSA-736c-q36g-prw3

Application protections bypass vulnerability could allow unauthenticated user to impersonate system users

Priority LOW 31

Application protection bypass vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows unauthenticated user to impersonate system users via specially crafted parameters.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0122 Published 2019-06-27 Fixed in 11.2.0, 10.4.0
TI-2015-06078 CVE-2015-7310 · GHSA-x85c-wgp5-v66x

McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager…

Priority LOW 31

McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enterprise Security Manager/Receiver (ESMREC) before 9.3.2MR18, 9.4.x before 9.4.2MR8, and 9.5.x before 9.5.0MR7 allow remote…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01127 Published 2015-09-22 No fix listed CWE-78
Open these records in search →