Skip to content
OpenAdvisories

Vendor

McAfee

275 known vulnerabilities.

Products

McAfee Endpoint Security (ENS) 18 Network Security Management (NSM) 16 McAfee Web Gateway (MWG) 13 McAfee Total Protection (MTP) 12 McAfee ePolicy Orchestrator (ePO) 12 Advanced Threat Defense (ATD) 12 Network Data Loss Prevention (NDLP) 8 McAfee Agent for Windows 8 McAfee Database Security (DBSec) 6 DLP ePO extension 6 Endpoint Security for Windows 6 ePolicy Orchestrator (ePO) 6 McAfee Data Loss Prevention (DLP) Endpoint for Windows 5 Endpoint Security (ENS) for Windows 5 McAfee Enterprise Security Manager (ESM) 5 McAfee Agent (MA) 5 McAfee Network Security Manager (NSM) 4 Data Loss Prevention (DLPe) for Windows 4 True Key 4 McAfee Advanced Threat Defense (ATD) 4 McAfee Endpoint Security (ENS) for WIndows 4 McAfee VirusScan Enterprise (VSE) 3 MVision Endpoint 3 McAfee Agent (MA) for Linux 3 True Key (TK) 3 MA for Windows 3 McAfee Agent 3 Mcafee Application and Change Control (MACC) 3 Network Data Loss Prevention 3 MVISION Endpoint ePO extension 2 Data Loss Prevention(DLP) 2 McAfee Consumer Product Removal Tool 2 McAfee Total Protection (MTP) Trial 2 Total Protection (MTP) 2 McAfee Drive Encryption (MDE) 2 McAfee TechCheck 2 VirusScan Enterprise (VSE) 2 Application and Change Control 2 McAfee Web Advisor (WA) 2 Threat Intelligence Exchange Server (TIE Server) 2
All Critical High Medium Low Exploited only Public exploit

125 results · Clear filters · Feed

  • Medium 6.8
    CVE-2018-6674

    Privilege escalation vulnerability in McAfee VSE when McTray run with elevated privileges

    Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13 allows local users to spawn unrelated processes with elevated privileges via the system administrator granting McTray.exe el…

    McAfee VirusScan Enterprise (VSE)
  • Medium 6.4
    CVE-2017-3966

    SB10192 - Network Security Management (NSM) - Exploitation of session variables, resource IDs and other trusted credentials vulnerability

    Exploitation of session variables, resource IDs and other trusted credentials vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to exploit or harm a user's browser via reusing the exposed …

    McAfee Network Security Management (NSM)
  • Medium 6.1
    CVE-2017-3967

    SB10192 - Network Security Management (NSM) - Target influence via framing vulnerability

    Target influence via framing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to inject arbitrary web script or HTML via application pages inability to break out of 3rd party HTML frames.

    McAfee Network Security Management (NSM)
  • Medium 5.0
    CVE-2017-4028

    SB10193 - consumer and corporate products - Maliciously misconfigured registry vulnerability

    Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters.

    McAfee McAfee Endpoint Security (ENS) McAfee Total Protection (MTP) McAfee Anti-Virus Plus (AVP)
  • Medium 6.2
    CVE-2018-6660

    SB10228 ePO Directory Traversal vulnerability

    Directory Traversal vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data streams, which could be used to bypass the file extensions, via not properly validating the path when expo…

    McAfee ePolicy Orchestrator (ePO)