Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

Priority LOW 37

McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0239 Published 2019-09-11 Fixed in 7.8.2.13
Priority LOW 37

McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, potentially leading to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0239 Published 2019-09-11 Fixed in 7.8.2.13
Priority MEDIUM 41

Directory Traversal vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to gain elevated privileges via specially crafted input.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0168 Published 2019-06-27 Fixed in 11.2.0, 10.4.0 CWE-22
Priority LOW 36

Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary code via specially crafted parameters.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02009 Published 2019-06-27 Fixed in 11.2.0, 10.4.0 CWE-78
Priority LOW 36

Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary code via specially crafted parameters.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02009 Published 2019-06-27 Fixed in 11.2.0, 10.4.0 CWE-78
Priority LOW 31

Application protection bypass vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows unauthenticated user to impersonate system users via specially crafted parameters.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0122 Published 2019-06-27 Fixed in 11.2.0, 10.4.0
Priority LOW 31

McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enterprise Security Manager/Receiver (ESMREC) before 9.3.2MR18, 9.4.x before 9.4.2MR8, and 9.5.x before 9.5.0MR7 allow remote…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01127 Published 2015-09-22 No fix listed CWE-78