Skip to content
OpenAdvisories

Vendor

McAfee

193 known vulnerabilities.

Products

McAfee Endpoint Security (ENS) 18 Network Security Management (NSM) 16 McAfee Web Gateway (MWG) 12 Advanced Threat Defense (ATD) 12 Network Data Loss Prevention (NDLP) 8 DLP ePO extension 6 Endpoint Security for Windows 6 ePolicy Orchestrator (ePO) 6 Endpoint Security (ENS) for Windows 5 McAfee Enterprise Security Manager (ESM) 5 McAfee Agent (MA) 5 Data Loss Prevention (DLPe) for Windows 4 True Key 4 McAfee Network Security Manager (NSM) 3 McAfee Total Protection (MTP) 3 McAfee VirusScan Enterprise (VSE) 3 MVision Endpoint 3 McAfee Agent (MA) for Linux 3 True Key (TK) 3 MA for Windows 3 Network Data Loss Prevention 3 MVISION Endpoint ePO extension 2 Data Loss Prevention(DLP) 2 Total Protection (MTP) 2 VirusScan Enterprise (VSE) 2 Application and Change Control 2 McAfee Web Advisor (WA) 2 McAfee Advanced Threat Defense (ATD) 2 Live Safe 2 McAfee Agent 2 Data Loss Prevention (DLP) ePO extension 2 Data Loss Prevention Endpoint (DLPe) 2 ePolicy Orchistrator (ePO) 2 Threat Intelligence Exchange (TIE) Server 2 Database Security 1 Security Scan Plus 1 Total Protection (ToPS) for Mac OS 1 Endpoint Product Removal Tool 1 VirusScan Enterprise 1 McAfee ePolicy Orchestrator (ePO) 1
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Low 3.5
    CVE-2020-7295

    Web Gateway (MWG) - Privilege Escalation vulnerability

    Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the user interface.

    McAfee McAfee Web Gateway (MWG)
  • Low 3.9
    CVE-2020-7309

    Cross Site Scripting vulnerability in ePO extension of MACC

    Cross Site Scripting vulnerability in ePO extension in McAfee Application Control (MAC) prior to 8.3.1 allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery section.

    McAfee McAfee Application and Change Control
  • Low 3.9
    CVE-2020-7255

    Privilege Escalation vulnerability  in ENS

    Privilege escalation vulnerability in the administrative user interface in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows local users to gain elevated privileges via ENS not checking user permissions when editing config…

    McAfee McAfee Endpoint Security (ENS)
  • Low 3.9
    CVE-2019-3591

    DLP Endpoint ePO extension vulnerable to XSS

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in ePO extension in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows unauthenticated remote user to trigger specially crafted JavaScript to render i…

    McAfee Data Loss Prevention ePO extension
  • Low 2.0
    CVE-2019-3595

    DLP Endpoint ePO extension not sanitizing CSV exports

    Improper Neutralization of Special Elements used in a Command ('Command Injection') in ePO extension in McAfee Data Loss Prevention (DLP) 11.x prior to 11.3.0 allows Authenticated Adminstrator to execute arbitrary code with their local machine privileges via …

    McAfee DLP Endpoint ePO extension
  • Low 3.7
    CVE-2018-6707

    McAfee Agent Insecure usage of temporary files vulnerability

    Denial of Service through Resource Depletion vulnerability in the agent in non-Windows McAfee Agent (MA) 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to cause DoS, unexpected behavior, or potentially unauthorized code execution via knowledge of th…

    McAfee McAfee Agent (MA) non-Windows non-Windows versions Windows
  • Low 2.3
    CVE-2018-6706

    McAfee Agent (MA) non-Windows versions incorrect use of temporary file vulnerability

    Insecure handling of temporary files in non-Windows McAfee Agent 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows an Unprivileged User to introduce custom paths during agent installation in Linux via unspecified vectors.

    McAfee McAfee Agent (MA) for Linux Linux
  • Low 2.3
    CVE-2018-6705

    McAfee Agent (MA) for Linux Privilege Escalation vulnerability

    Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command execution via specific conditions.

    McAfee McAfee Agent (MA) for Linux Linux
  • Low 3.4
    CVE-2018-6678

    McAfee Web Gateway (MWG) - Configuration/Environment manipulation vulnerability

    Configuration/Environment manipulation vulnerability in the administrative interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to execute arbitrary commands via unspecified vectors.

    McAfee McAfee Web Gateway (MWG)
  • Low 3.5
    CVE-2017-3961

    SB10192 - Network Security Management (NSM) - Cross-Site Scripting (XSS) vulnerability

    Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated users to allow arbitrary HTML code to be reflected in the response web page via crafted user input of attributes.

    McAfee Network Security Management (NSM)
  • Low 3.5
    CVE-2017-3964

    SB10192 - Network Security Management (NSM) - Reflective Cross-Site Scripting (XSS) vulnerability

    Reflective Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to inject arbitrary web script or HTML via a URL parameter.

    McAfee Network Security Management (NSM)
  • Low 3.7
    CVE-2018-6659

    SB10228 ePO Reflected Cross-Site Scripting vulnerability

    Reflected Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows remote authenticated users to exploit an XSS issue via not sanitizing the user input.

    McAfee ePolicy Orchestrator (ePO)