mcafee Vulnerability Advisory Catalog

Total 506 security vulnerabilities recorded for mcafee software and firmware.

← Back to All Vendors
CVE-2020-7308 MEDIUM
Component: endpoint_security

Cleartext Transmission of Sensitive Information between McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update and McAfee Glo...

📅 2021-04-15
CVSS 4.8 Dossier →
CVE-2020-7270 MEDIUM
Component: advanced_threat_defense

Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to vi...

📅 2021-04-15
CVSS 4.9 Dossier →
CVE-2020-7269 MEDIUM
Component: advanced_threat_defense

Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to vi...

📅 2021-04-15
CVSS 4.9 Dossier →
Component: epolicy_orchestrator

Information leak vulnerability in the Agent Handler of McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 allows an unauthenticated user to dow...

📅 2021-03-26
CVSS 6.5 Dossier →
Component: epolicy_orchestrator

Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 allows ePO administrators to inject arbitrary web scri...

📅 2021-03-26
CVSS 3.5 Dossier →
Component: epolicy_orchestrator

Unvalidated client-side URL redirect vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 could cause an authenticated ePO user ...

📅 2021-03-26
CVSS 6.3 Dossier →
Component: data_loss_prevention

Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) for Windows prior to 11.6.100 allows a local, low privileged, attacker through...

📅 2021-03-23
CVSS 7.8 Dossier →
Component: endpoint_product_removal_tool

Unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool prior to 21.2 allows local administrators to execute arbitrary code,...

📅 2021-03-15
CVSS 6.7 Dossier →
CVE-2021-23885 CRITICAL
Component: web_gateway

Privilege escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.8 allows an authenticated user to gain elevated privileges through the Use...

📅 2021-02-17
CVSS 9.0 Dossier →
Component: endpoint_security

A stored cross site scripting vulnerability in ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 February 2021 Update allows an ENS ePO ...

📅 2021-02-10
CVSS 4.8 Dossier →
Component: total_protection

Bypass Remote Procedure call in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary f...

📅 2021-02-10
CVSS 7.8 Dossier →
Component: total_protection

Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execut...

📅 2021-02-10
CVSS 8.2 Dossier →
Component: total_protection

Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbit...

📅 2021-02-10
CVSS 7.8 Dossier →
Component: endpoint_security

A Null Pointer Dereference vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows a local administrat...

📅 2021-02-10
CVSS 4.0 Dossier →
Component: endpoint_security

Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows local administrators t...

📅 2021-02-10
CVSS 8.2 Dossier →
Component: endpoint_security

Improper Access Control in attribute in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows authenticated local adm...

📅 2021-02-10
CVSS 6.7 Dossier →
Component: endpoint_security

Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update...

📅 2021-02-10
CVSS 7.3 Dossier →
CVE-2020-7343 MEDIUM
Component: agent

Missing Authorization vulnerability in McAfee Agent (MA) for Windows prior to 5.7.1 allows local users to block McAfee product updates by manipulating...

📅 2021-01-18
CVSS 5.5 Dossier →
CVE-2020-7336 MEDIUM
Component: network_security_management

Cross Site Request Forgery vulnerability in McAfee Network Security Management (NSM) prior to 10.1.7.35 and NSM 9.x prior to 9.2.9.55 may allow an att...

📅 2021-01-05
CVSS 6.6 Dossier →
CVE-2020-7339 MEDIUM
Component: database_security

Use of a Broken or Risky Cryptographic Algorithm vulnerability in McAfee Database Security Server and Sensor prior to 4.8.0 in the form of a SHA1 sign...

📅 2020-12-10
CVSS 6.3 Dossier →
CVE-2020-7337 MEDIUM
Component: virusscan_enterprise

Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise (VSE) prior to 8.8 Patch 16 allows local administra...

📅 2020-12-09
CVSS 6.5 Dossier →
Component: total_protection

Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection (MTP) prior to 16.0.29 allows local users to gain elevated priv...

📅 2020-12-01
CVSS 7.5 Dossier →
CVE-2020-7333 MEDIUM
Component: endpoint_security

Cross site scripting vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows adminis...

📅 2020-11-12
CVSS 4.8 Dossier →
Component: endpoint_security

Cross Site Request Forgery vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows a...

📅 2020-11-12
CVSS 7.0 Dossier →
Page 4 of 22 (506 Total Records)