mcafee Vulnerability Advisory Catalog

Total 506 security vulnerabilities recorded for mcafee software and firmware.

← Back to All Vendors
CVE-2020-7263 MEDIUM
Component: endpoint_security

Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security (ENS) for Windows all current versions allows local administrato...

📅 2020-04-01
CVSS 6.5 Dossier →
Component: application_and_change_control

DLL Side Loading vulnerability in the installer for McAfee Application and Change Control (MACC) prior to 8.3 allows local users to execute arbitrary ...

📅 2020-03-26
CVSS 7.3 Dossier →
CVE-2020-7258 MEDIUM
Component: network_security_manager

Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified i...

📅 2020-03-18
CVSS 4.8 Dossier →
CVE-2020-7256 MEDIUM
Component: network_security_manager

Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified i...

📅 2020-03-18
CVSS 4.8 Dossier →
Component: advanced_threat_defense

Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to exec...

📅 2020-03-12
CVSS 7.7 Dossier →
CVE-2020-7253 MEDIUM
Component: agent

Improper access control vulnerability in masvc.exe in McAfee Agent (MA) prior to 5.6.4 allows local users with administrator privileges to disable sel...

📅 2020-03-12
CVSS 5.7 Dossier →
Component: web_advisor

Remote Code Execution vulnerability in the web interface in McAfee Web Advisor (WA) 8.0.34745 and earlier allows remote unauthenticated attacker to ex...

📅 2020-02-24
CVSS 8.0 Dossier →
CVE-2020-7252 MEDIUM
Component: data_exchange_layer

Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6.0.0 and earlier allows local users to cause a denial of...

📅 2020-02-17
CVSS 4.2 Dossier →
CVE-2020-7251 MEDIUM
Component: endpoint_security

Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 February 2020 Update allows local...

📅 2020-02-14
CVSS 5.0 Dossier →
CVE-2019-3667 MEDIUM
Component: techcheck

DLL Search Order Hijacking vulnerability in the Microsoft Windows client in McAfee Tech Check 3.0.0.17 and earlier allows local users to execute arbit...

📅 2019-12-11
CVSS 6.6 Dossier →
CVE-2019-3666 MEDIUM
Component: webadvisor

API Abuse/Misuse vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthenticated attacker to allow the b...

📅 2019-12-03
CVSS 6.5 Dossier →
CVE-2019-3665 MEDIUM
Component: webadvisor

Code Injection vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthenticated attacker to allow the bro...

📅 2019-12-03
CVSS 6.5 Dossier →
CVE-2019-3654 MEDIUM
Component: client_proxy

Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy (MCP) prior to 3.0.0 allows local user to bypass scanning o...

📅 2019-11-22
CVSS 5.3 Dossier →
CVE-2019-3663 CRITICAL
Component: advanced_threat_defense

Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows local attacker to gain access to the root...

📅 2019-11-14
CVSS 9.8 Dossier →
CVE-2019-3662 MEDIUM
Component: advanced_threat_defense

Path Traversal: '/absolute/pathname/here' vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to g...

📅 2019-11-14
CVSS 6.5 Dossier →
Component: advanced_threat_defense

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remot...

📅 2019-11-14
CVSS 8.1 Dossier →
CVE-2019-3640 MEDIUM
Component: data_loss_prevention

Unprotected Transport of Credentials in ePO extension in McAfee Data Loss Prevention 11.x prior to 11.4.0 allows remote attackers with access to the n...

📅 2019-11-14
CVSS 4.8 Dossier →
Component: advanced_threat_defense

Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute commands...

📅 2019-11-13
CVSS 8.4 Dossier →
Component: advanced_threat_defense

Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to ePO a...

📅 2019-11-13
CVSS 8.8 Dossier →
CVE-2019-3650 MEDIUM
Component: advanced_threat_defense

Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to the a...

📅 2019-11-13
CVSS 5.3 Dossier →
CVE-2019-3649 MEDIUM
Component: advanced_threat_defense

Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attackers to gain access to hash...

📅 2019-11-13
CVSS 5.3 Dossier →
CVE-2019-3641 MEDIUM
Component: threat_intelligence_exchange_server

Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0 allows remote auth...

📅 2019-11-13
CVSS 4.5 Dossier →
CVE-2019-3648 MEDIUM
Component: anti-virus_plus

A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute ...

📅 2019-11-13
CVSS 6.1 Dossier →
Component: total_protection

A File Masquerade vulnerability in McAfee Total Protection (MTP) version 16.0.R21 and earlier in Windows client allowed an attacker to read the plaint...

📅 2019-10-28
CVSS 7.5 Dossier →
Page 8 of 22 (506 Total Records)