Skip to content
OpenAdvisories

Vendor

McAfee

193 known vulnerabilities.

Products

McAfee Endpoint Security (ENS) 18 Network Security Management (NSM) 16 McAfee Web Gateway (MWG) 12 Advanced Threat Defense (ATD) 12 Network Data Loss Prevention (NDLP) 8 DLP ePO extension 6 Endpoint Security for Windows 6 ePolicy Orchestrator (ePO) 6 Endpoint Security (ENS) for Windows 5 McAfee Enterprise Security Manager (ESM) 5 McAfee Agent (MA) 5 Data Loss Prevention (DLPe) for Windows 4 True Key 4 McAfee Network Security Manager (NSM) 3 McAfee Total Protection (MTP) 3 McAfee VirusScan Enterprise (VSE) 3 MVision Endpoint 3 McAfee Agent (MA) for Linux 3 True Key (TK) 3 MA for Windows 3 Network Data Loss Prevention 3 MVISION Endpoint ePO extension 2 Data Loss Prevention(DLP) 2 Total Protection (MTP) 2 VirusScan Enterprise (VSE) 2 Application and Change Control 2 McAfee Web Advisor (WA) 2 McAfee Advanced Threat Defense (ATD) 2 Live Safe 2 McAfee Agent 2 Data Loss Prevention (DLP) ePO extension 2 Data Loss Prevention Endpoint (DLPe) 2 ePolicy Orchistrator (ePO) 2 Threat Intelligence Exchange (TIE) Server 2 Database Security 1 Security Scan Plus 1 Total Protection (ToPS) for Mac OS 1 Endpoint Product Removal Tool 1 VirusScan Enterprise 1 McAfee ePolicy Orchestrator (ePO) 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-3663 Public exploit

    Advanced Threat Defense (ATD) - Unprotected storage of shared credentials vulnerability

    Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows local attacker to gain access to the root password via accessing sensitive files on the system. This was originally published with a CVSS rating of Hi…

    McAfee Advanced Threat Defense (ATD)
  • High 7.8
    CVE-2018-6756 Public exploit

    True Key (TK) Windows Client - Authentication Abuse vulnerability

    Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware.

    McAfee True Key
  • High 7.5
    CVE-2018-6757 Public exploit

    True Key (TK) Windows Client - Privilege Escalation vulnerability

    Privilege Escalation vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware.

    McAfee True Key
  • High 7.2
    CVE-2018-6755 Public exploit

    True Key (TK) Windows Client - Weak Directory Permission Vulnerability

    Weak Directory Permission Vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware.

    McAfee True Key
  • Medium 4.7
    CVE-2018-6671 Public exploit

    SB10240 - ePolicy Orchestrator (ePO) - Application Protection Bypass vulnerability

    Application Protection Bypass vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows remote authenticated users to bypass localhost only access security protection for some ePO features via a specially crafted HT…

    McAfee ePolicy Orchestrator (ePO)
  • Unscored —
    CVE-2017-3897 Public exploit EPSS 12%

    A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior…

    McAfee Live Safe Security Scan Plus
  • Unscored —
    CVE-2017-3898 Public exploit

    A man-in-the-middle attack vulnerability in the non-certificate-based authentication mechanism in McAfee LiveSafe (MLS)…

    McAfee Live Safe