Skip to content
OpenAdvisories

Vendor

McAfee

275 known vulnerabilities.

Products

McAfee Endpoint Security (ENS) 18 Network Security Management (NSM) 16 McAfee Web Gateway (MWG) 13 McAfee Total Protection (MTP) 12 McAfee ePolicy Orchestrator (ePO) 12 Advanced Threat Defense (ATD) 12 Network Data Loss Prevention (NDLP) 8 McAfee Agent for Windows 8 McAfee Database Security (DBSec) 6 DLP ePO extension 6 Endpoint Security for Windows 6 ePolicy Orchestrator (ePO) 6 McAfee Data Loss Prevention (DLP) Endpoint for Windows 5 Endpoint Security (ENS) for Windows 5 McAfee Enterprise Security Manager (ESM) 5 McAfee Agent (MA) 5 McAfee Network Security Manager (NSM) 4 Data Loss Prevention (DLPe) for Windows 4 True Key 4 McAfee Advanced Threat Defense (ATD) 4 McAfee Endpoint Security (ENS) for WIndows 4 McAfee VirusScan Enterprise (VSE) 3 MVision Endpoint 3 McAfee Agent (MA) for Linux 3 True Key (TK) 3 MA for Windows 3 McAfee Agent 3 Mcafee Application and Change Control (MACC) 3 Network Data Loss Prevention 3 MVISION Endpoint ePO extension 2 Data Loss Prevention(DLP) 2 McAfee Consumer Product Removal Tool 2 McAfee Total Protection (MTP) Trial 2 Total Protection (MTP) 2 McAfee Drive Encryption (MDE) 2 McAfee TechCheck 2 VirusScan Enterprise (VSE) 2 Application and Change Control 2 McAfee Web Advisor (WA) 2 Threat Intelligence Exchange Server (TIE Server) 2
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.0
    CVE-2021-23895

    Authorized deserialization of untrusted data in McAfee DBSec

    Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized obj…

    McAfee McAfee Database Security (DBSec)
  • Critical 9.6
    CVE-2021-23894

    Unauthorized deserialization of untrusted data in McAfee DBSec

    Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unauthenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized o…

    McAfee McAfee Database Security (DBSec)
  • Critical 9.0
    CVE-2021-23885

    Privilege escalation vulnerability in McAfee Web Gateway (MWG) UI

    Privilege escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.8 allows an authenticated user to gain elevated privileges through the User Interface and execute commands on the appliance via incorrect improper neutralization of user input in the …

    McAfee McAfee Web Gateway (MWG)
  • Critical 9.0
    CVE-2020-7293

    Web Gateway (MWG) - Privilege Escalation vulnerability

    Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access controls in the user interface.

    McAfee McAfee Web Gateway (MWG)
  • Critical 9.8
    CVE-2019-3663 Public exploit

    Advanced Threat Defense (ATD) - Unprotected storage of shared credentials vulnerability

    Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows local attacker to gain access to the root password via accessing sensitive files on the system. This was originally published with a CVSS rating of Hi…

    McAfee Advanced Threat Defense (ATD)
  • Critical 9.8
    CVE-2018-6703

    Remote Logging functionality had a use after free vulnerability in McAfee Agent

    Use After Free in Remote logging (which is disabled by default) in McAfee McAfee Agent (MA) 5.x prior to 5.6.0 allows remote unauthenticated attackers to cause a Denial of Service and potentially a remote code execution via a specially crafted HTTP header sen…

    McAfee McAfee Agent
  • Critical 10.0
    CVE-2018-6667

    McAfee Web Gateway - Authentication Bypass vulnerability

    Authentication Bypass vulnerability in the administrative user interface in McAfee Web Gateway 7.8.1.0 through 7.8.1.5 allows remote attackers to execute arbitrary code via Java management extensions (JMX).

    McAfee Web Gateway