Skip to content
OpenAdvisories

Vendor

McAfee

275 known vulnerabilities.

Products

McAfee Endpoint Security (ENS) 18 Network Security Management (NSM) 16 McAfee Web Gateway (MWG) 13 McAfee Total Protection (MTP) 12 McAfee ePolicy Orchestrator (ePO) 12 Advanced Threat Defense (ATD) 12 Network Data Loss Prevention (NDLP) 8 McAfee Agent for Windows 8 McAfee Database Security (DBSec) 6 DLP ePO extension 6 Endpoint Security for Windows 6 ePolicy Orchestrator (ePO) 6 McAfee Data Loss Prevention (DLP) Endpoint for Windows 5 Endpoint Security (ENS) for Windows 5 McAfee Enterprise Security Manager (ESM) 5 McAfee Agent (MA) 5 McAfee Network Security Manager (NSM) 4 Data Loss Prevention (DLPe) for Windows 4 True Key 4 McAfee Advanced Threat Defense (ATD) 4 McAfee Endpoint Security (ENS) for WIndows 4 McAfee VirusScan Enterprise (VSE) 3 MVision Endpoint 3 McAfee Agent (MA) for Linux 3 True Key (TK) 3 MA for Windows 3 McAfee Agent 3 Mcafee Application and Change Control (MACC) 3 Network Data Loss Prevention 3 MVISION Endpoint ePO extension 2 Data Loss Prevention(DLP) 2 McAfee Consumer Product Removal Tool 2 McAfee Total Protection (MTP) Trial 2 Total Protection (MTP) 2 McAfee Drive Encryption (MDE) 2 McAfee TechCheck 2 VirusScan Enterprise (VSE) 2 Application and Change Control 2 McAfee Web Advisor (WA) 2 Threat Intelligence Exchange Server (TIE Server) 2
All Critical High Medium Low Exploited only Public exploit

275 results · Feed

  • High 7.5
    CVE-2018-6662

    SB10232 - McAfee Management of Native Encryption (MNE) - Privilege Escalation vulnerability

    Privilege Escalation vulnerability in McAfee Management of Native Encryption (MNE) before 4.1.4 allows local users to gain elevated privileges via a crafted user input.

    McAfee McAfee Management of Native Encryption (MNE)
  • Medium 5.8
    CVE-2018-6664

    SB10233 - Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 - Application Protections Bypass vulnerability

    Application Protections Bypass vulnerability in Microsoft Windows in McAfee Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 allows authenticated users to bypass the product block action via a command-line utility.

    McAfee Data Loss Prevention (DLP) Endpoint
  • Medium 6.8
    CVE-2018-6674

    Privilege escalation vulnerability in McAfee VSE when McTray run with elevated privileges

    Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13 allows local users to spawn unrelated processes with elevated privileges via the system administrator granting McTray.exe el…

    McAfee VirusScan Enterprise (VSE)
  • Low 3.5
    CVE-2017-3961

    SB10192 - Network Security Management (NSM) - Cross-Site Scripting (XSS) vulnerability

    Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated users to allow arbitrary HTML code to be reflected in the response web page via crafted user input of attributes.

    McAfee Network Security Management (NSM)
  • High 8.8
    CVE-2017-3965

    SB10192 - Network Security Management (NSM) - Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerability

    Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to perform unauthorized tasks such as retrieving internal system information or man…

    McAfee Network Security Management (NSM)
  • High 8.2
    CVE-2017-3969

    SB10192 - Network Security Management (NSM) - Abuse of communication channels vulnerability

    Abuse of communication channels vulnerability in the server in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows man-in-the-middle attackers to decrypt messages via an inadequate implementation of SSL.

    McAfee Network Security Management (NSM)
  • Low 3.5
    CVE-2017-3964

    SB10192 - Network Security Management (NSM) - Reflective Cross-Site Scripting (XSS) vulnerability

    Reflective Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to inject arbitrary web script or HTML via a URL parameter.

    McAfee Network Security Management (NSM)
  • High 8.2
    CVE-2017-3971

    SB10192 - Network Security Management (NSM) - Cryptanalysis vulnerability

    Cryptanalysis vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to view confidential information via insecure use of RC4 encryption cyphers.

    McAfee Network Security Management (NSM)
  • Medium 6.4
    CVE-2017-3966

    SB10192 - Network Security Management (NSM) - Exploitation of session variables, resource IDs and other trusted credentials vulnerability

    Exploitation of session variables, resource IDs and other trusted credentials vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to exploit or harm a user's browser via reusing the exposed …

    McAfee Network Security Management (NSM)
  • Medium 6.1
    CVE-2017-3967

    SB10192 - Network Security Management (NSM) - Target influence via framing vulnerability

    Target influence via framing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to inject arbitrary web script or HTML via application pages inability to break out of 3rd party HTML frames.

    McAfee Network Security Management (NSM)
  • Medium 5.0
    CVE-2017-4028

    SB10193 - consumer and corporate products - Maliciously misconfigured registry vulnerability

    Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters.

    McAfee McAfee Endpoint Security (ENS) McAfee Total Protection (MTP) McAfee Internet Security (MIS)
  • High 8.3
    CVE-2017-3972

    SB10192 - Network Security Management (NSM) - Infrastructure-based foot printing vulnerability

    Infrastructure-based foot printing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to execute arbitrary code via the server banner leaking potentially sensitive or security relevant information.

    McAfee Network Security Management (NSM)
  • Low 3.7
    CVE-2018-6659

    SB10228 ePO Reflected Cross-Site Scripting vulnerability

    Reflected Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows remote authenticated users to exploit an XSS issue via not sanitizing the user input.

    McAfee ePolicy Orchestrator (ePO)
  • High 7.5
    CVE-2018-6661

    TS102801 True Key DLL Side-Loading vulnerability

    DLL Side-Loading vulnerability in Microsoft Windows Client in McAfee True Key before 4.20.110 allows local users to gain privilege elevation via not verifying a particular DLL file signature.

    McAfee True Key
  • Medium 6.2
    CVE-2018-6660

    SB10228 ePO Directory Traversal vulnerability

    Directory Traversal vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data streams, which could be used to bypass the file extensions, via not properly validating the path when expo…

    McAfee ePolicy Orchestrator (ePO)
  • Unscored —
    CVE-2017-3934

    Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Preven…

    McAfee Network Data Loss Prevention
  • Unscored —
    CVE-2017-3935

    Network Data Loss Prevention is vulnerable to MIME type sniffing which allows older versions of Internet Explorer to pe…

    McAfee Network Data Loss Prevention
  • Unscored —
    CVE-2017-3933

    Embedding Script (XSS) in HTTP Headers vulnerability in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote …

    McAfee Network Data Loss Prevention
  • Unscored —
    CVE-2017-3897 Public exploit EPSS 12%

    A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior…

    McAfee Live Safe Security Scan Plus
  • Unscored —
    CVE-2017-3898 Public exploit

    A man-in-the-middle attack vulnerability in the non-certificate-based authentication mechanism in McAfee LiveSafe (MLS)…

    McAfee Live Safe
  • Unscored —
    CVE-2017-4052

    Authentication Bypass vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 al…

    McAfee Advanced Threat Defense (ATD)
  • Unscored —
    CVE-2017-4053

    Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows…

    McAfee Advanced Threat Defense (ATD)
  • Unscored —
    CVE-2017-4055

    Exploitation of Authentication vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.…

    McAfee Advanced Threat Defense (ATD)
  • Unscored —
    CVE-2017-4057

    Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 all…

    McAfee Advanced Threat Defense (ATD)
  • Unscored —
    CVE-2017-4054

    Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows…

    McAfee Advanced Threat Defense (ATD)
  • Unscored —
    CVE-2017-3948

    Cross Site Scripting (XSS) in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint (DLP Endpoint) 10.0…

    McAfee Data Loss Prevention Endpoint (DLPe)
  • Unscored —
    CVE-2017-3980

    A directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, and 5.1.3 a…

    McAfee ePolicy Orchestrator (ePO)
  • Unscored —
    CVE-2017-4013

    Banner Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to obtain p…

    McAfee Network Data Loss Prevention (NDLP)
  • Unscored —
    CVE-2017-4011 Scanner template

    Embedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x …

    McAfee Network Data Loss Prevention (NDLP)
  • Unscored —
    CVE-2017-4016

    Web Server method disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers …

    McAfee Network Data Loss Prevention (NDLP)
  • Unscored —
    CVE-2017-4017

    User Name Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to view …

    McAfee Network Data Loss Prevention (NDLP)
  • Unscored —
    CVE-2017-4015

    Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticate…

    McAfee Network Data Loss Prevention (NDLP)
  • Unscored —
    CVE-2017-4012

    Privilege Escalation vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote auth…

    McAfee Network Data Loss Prevention (NDLP)
  • Unscored —
    CVE-2017-4014

    Session Side jacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote auth…

    McAfee Network Data Loss Prevention (NDLP)
  • Unscored —
    CVE-2016-8030

    A memory corruption vulnerability in Scriptscan COM Object in McAfee VirusScan Enterprise 8.8 Patch 8 and earlier allow…

    McAfee VirusScan Enterprise