Skip to content
OpenAdvisories

Product · McAfee

McAfee Enterprise Security Manager (ESM)

5 known vulnerabilities.

5 results · Clear filters · Feed

  • High 8.5

    Directory Traversal vulnerability could lead to elevated privileges

    Directory Traversal vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to gain elevated privileges via specially crafted input.

  • High 8.0

    Command Injection could allow authenticated users to execute arbitrary code

    Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary code via specially crafted parameters.

  • High 8.0

    Command Injection could allow authenticated users to execute arbitrary code

    Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary code via specially crafted parameters.

  • High 8.3

    Application protections bypass vulnerability could allow unauthenticated user to impersonate system users

    Application protection bypass vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows unauthenticated user to impersonate system users via specially crafted parameters.

  • High 7.5

    Privilege escalation could allow authenticated user to gain access to a core system

    Privilege escalation in McAfee Enterprise Security Manager (ESM) 11.x prior to 11.2.0 allows authenticated user to gain access to a core system component via incorrect access control.