mcafee Vulnerability Advisory Catalog

Total 506 security vulnerabilities recorded for mcafee software and firmware.

← Back to All Vendors
CVE-2018-6695 MEDIUM
Component: threat_intelligence_exchange_server

SSH host keys generation vulnerability in the server in McAfee Threat Intelligence Exchange Server (TIE Server) 1.3.0, 2.0.x, 2.1.x, 2.2.0 allows man-...

📅 2018-10-03
CVSS 5.9 Dossier →
Component: data_loss_prevention_endpoint

Authentication Bypass vulnerability in McAfee Data Loss Prevention Endpoint (DLPe) 10.0.x earlier than 10.0.510, and 11.0.x earlier than 11.0.600 allo...

📅 2018-10-03
CVSS 7.8 Dossier →
Component: true_key

DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key (TK) before 5.1.165 allows local users to execute arbitrary co...

📅 2018-09-24
CVSS 7.8 Dossier →
CVE-2018-6682 MEDIUM
Component: true_key

Cross Site Scripting Exposure in McAfee True Key (TK) 4.0.0.0 and earlier allows local users to expose confidential data via a crafted web site....

📅 2018-09-24
CVSS 6.1 Dossier →
Component: application_change_control

Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control (MACC) 8.0.0 Ho...

📅 2018-09-18
CVSS 7.1 Dossier →
CVE-2017-3912 MEDIUM
Component: application_and_change_control

Bypassing password security vulnerability in McAfee Application and Change Control (MACC) 7.0.1 and 6.2.0 allows authenticated users to perform arbitr...

📅 2018-09-18
CVSS 4.4 Dossier →
CVE-2018-6693 MEDIUM
Component: endpoint_security_for_linux_threat_prevention

An unprivileged user can delete arbitrary files on a Linux system running ENSLTP 10.5.1, 10.5.0, and 10.2.3 Hotfix 1246778 and earlier. By exploiting ...

📅 2018-09-18
CVSS 5.3 Dossier →
CVE-2018-6686 MEDIUM
Component: drive_encryption

Authentication Bypass vulnerability in TPM autoboot in McAfee Drive Encryption (MDE) 7.1.0 and above allows physically proximate attackers to bypass l...

📅 2018-07-27
CVSS 6.6 Dossier →
Component: data_loss_prevention_endpoint

Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0...

📅 2018-07-23
CVSS 7.4 Dossier →
CVE-2018-6678 CRITICAL
Component: mcafee_web_gateway

Configuration/Environment manipulation vulnerability in the administrative interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated admi...

📅 2018-07-23
CVSS 9.1 Dossier →
CVE-2018-6677 CRITICAL
Component: mcafee_web_gateway

Directory Traversal vulnerability in the administrative user interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator user...

📅 2018-07-23
CVSS 9.1 Dossier →
CVE-2018-6681 MEDIUM
Component: network_security_manager

Abuse of Functionality vulnerability in the web interface in McAfee Network Security Management (NSM) 9.1.7.11 and earlier allows authenticated users ...

📅 2018-07-17
CVSS 5.4 Dossier →
CVE-2018-6667 CRITICAL
Component: mcafee_web_gateway

Authentication Bypass vulnerability in the administrative user interface in McAfee Web Gateway 7.8.1.0 through 7.8.1.5 allows remote attackers to exec...

📅 2018-06-26
CVSS 10.0 Dossier →
CVE-2018-6672 MEDIUM
Component: epolicy_orchestrator

Information disclosure vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows authenticated users to vi...

📅 2018-06-15
CVSS 5.7 Dossier →
CVE-2018-6671 MEDIUM
Component: epolicy_orchestrator

Application Protection Bypass vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows remote authenticat...

📅 2018-06-15
CVSS 4.7 Dossier →
CVE-2017-3936 MEDIUM
Component: epolicy_orchestrator

OS Command Injection vulnerability in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows attackers to run ar...

📅 2018-06-13
CVSS 6.2 Dossier →
CVE-2017-3907 MEDIUM
Component: mcafee_threat_intelligence_exchange

Code Injection vulnerability in the ePolicy Orchestrator (ePO) extension in McAfee Threat Intelligence Exchange (TIE) Server 2.1.0 and earlier allows ...

📅 2018-06-13
CVSS 5.4 Dossier →
Component: network_data_loss_prevention

Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfee Network Data Loss Prevention...

📅 2018-06-13
CVSS 7.5 Dossier →
CVE-2017-3962 MEDIUM
Component: network_security_manager

Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management (NSM) before ...

📅 2018-06-12
CVSS 5.6 Dossier →
CVE-2017-3960 MEDIUM
Component: network_security_manager

Exploitation of Authorization vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated us...

📅 2018-06-12
CVSS 5.9 Dossier →
Component: common_catalog

External Entity Attack vulnerability in the ePO extension in McAfee Common UI (CUI) 2.0.2 allows remote authenticated users to view confidential infor...

📅 2018-06-07
CVSS 7.6 Dossier →
Component: management_of_native_encryption

Privilege Escalation vulnerability in McAfee Management of Native Encryption (MNE) before 4.1.4 allows local users to gain elevated privileges via a c...

📅 2018-06-05
CVSS 7.8 Dossier →
CVE-2018-6674 MEDIUM
Component: virusscan_enterprise

Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13 allows local us...

📅 2018-05-25
CVSS 6.8 Dossier →
CVE-2018-6664 MEDIUM
Component: data_loss_prevention_endpoint

Application Protections Bypass vulnerability in Microsoft Windows in McAfee Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint befor...

📅 2018-05-25
CVSS 5.8 Dossier →
Page 11 of 22 (506 Total Records)