Read the docs

McAfee

Records603All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical42CVSS 9.0–10.0
CVSS high223CVSS 7.0–8.9

Exploited now

McAfee records in CISA KEV
TI-2021-02242 Sudo Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2022-04-06TI-2021-06229 McAfee Total Protection (MTP) Improper Privilege Management Vulnerability Priority CRITICAL 95KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Epolicy Orchestrator 86 records HIGH Web Gateway 41 records CRITICAL Endpoint Security 37 records LOW Network Data Loss Prevention 31 records HIGH Virusscan Enterprise 29 records MEDIUM Advanced Threat Defense 26 records MEDIUM Data Loss Prevention Endpoint 26 records LOW Total Protection 26 records CRITICAL

Records

31 records in Network Data Loss Prevention · all components

TI-2017-03010 CVE-2017-3968 · GHSA-wp6v-87jv-h5gr

Session fixation in McAfee Network Security Management

Priority MEDIUM 42

Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfee Network Data Loss Prevention (NDLP) before 9.3.4.1.5 allows remote attackers to disclose sensitive…

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.01497 Published 2018-06-13 Fixed in 8.2.7.42.2, 9.3.4.1.5 Hotfix 1201697_47868 CWE-384
TI-2017-03018 CVE-2017-4014 · GHSA-c4fc-2334-8h36

Session fixation in McAfee Network Data Loss Prevention

Priority LOW 36

Session Side jacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view, add, and remove users via modification of the HTTP request.

CVSS 3.0HIGH 8.0 Network Low privileges User interaction EPSS 0.00861 Published 2017-05-17 No fix listed CWE-384
TI-2017-03000 CVE-2017-3935 · GHSA-6v3c-3xhp-9hj9

Information disclosure in McAfee Network Data Loss Prevention

Priority LOW 35

Network Data Loss Prevention is vulnerable to MIME type sniffing which allows older versions of Internet Explorer to perform MIME-sniffing on the response body, potentially causing the response body to be interpreted and…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01033 Published 2017-10-31 No fix listed CWE-200
TI-2017-03015 CVE-2017-4011 · GHSA-8324-gvhf-344h

Cross-site scripting in McAfee Network Data Loss Prevention

Priority LOW 33

Embedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to get session/cookie information via modification of the HTTP request.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.03271 Published 2017-05-17 No fix listed CWE-79
TI-2017-02999 CVE-2017-3934 · GHSA-cvc2-4jr8-vm5h

Information disclosure in McAfee Network Data Loss Prevention

Priority LOW 28

Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows man-in-the-middle attackers to expose confidential data via read files on th…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00991 Published 2017-10-31 No fix listed CWE-200
TI-2017-03021 CVE-2017-4017 · GHSA-5wgx-x6q4-4fqw

Information disclosure in McAfee Network Data Loss Prevention

Priority LOW 26

User Name Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to view user information via the appliance web interface.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01049 Published 2017-05-17 No fix listed CWE-200
TI-2017-03020 CVE-2017-4016 · GHSA-g994-7qqj-76mv

Information disclosure in McAfee Network Data Loss Prevention

Priority LOW 26

Web Server method disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to exploit and find another hole via HTTP response header.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01049 Published 2017-05-17 No fix listed CWE-200
TI-2017-03017 CVE-2017-4013 · GHSA-6657-wc5p-m68h

Information disclosure in McAfee Network Data Loss Prevention

Priority LOW 26

Banner Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to obtain product information via HTTP response header.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01049 Published 2017-05-17 No fix listed CWE-200
TI-2014-07001 CVE-2014-8525 · GHSA-mwj6-7r62-7c4w

McAfee Network Data Loss Prevention (NDLP) before 9.3 does not include the HTTPOnly flag…

Priority LOW 26

McAfee Network Data Loss Prevention (NDLP) before 9.3 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive informati…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01354 Published 2014-10-29 No fix listed CWE-200
TI-2017-02998 CVE-2017-3933 · GHSA-44mv-32fh-v4ff

Cross-site scripting in McAfee Network Data Loss Prevention

Priority LOW 25

Embedding Script (XSS) in HTTP Headers vulnerability in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view confidential information via a cross site request forgery attack.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00642 Published 2017-10-31 No fix listed CWE-79
TI-2017-03019 CVE-2017-4015 · GHSA-qhmp-pxvc-gh7c

Clickjacking in McAfee Network Data Loss Prevention

Priority LOW 23

Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to inject arbitrary web script or HTML via HTTP response header.

CVSS 3.1MEDIUM 4.5 Network High privileges User interaction EPSS 0.01198 Published 2017-05-17 No fix listed CWE-1021
Load more
Open these records in search →