mcafee

602 tracked vulnerabilities.

CVE-2019-3622 HIGH
McAfee DLPe <11.3.0 - Privilege Escalation
Jul 24, 2019
CVSS 8.2
EPSS 0.00
CVE-2019-3595 MEDIUM
McAfee Data Loss Prevention Endpoint 11.0-11.1.200 - Authenticated Command Injection via DLP Policy Export
Jul 24, 2019
CVSS 6.5
EPSS 0.00
CVE-2019-3591 LOW
McAfee Data Loss Prevention Endpoint 11.0-11.1.200 - Stored Cross-Site Scripting via ePO UI Event Rendering
Jul 24, 2019
CVSS 3.9
EPSS 0.00
CVE-2019-2842 LOW
Oracle JDK 8u212 - Unauthenticated Partial Denial of Service via JCE
Jul 23, 2019
CVSS 3.7
EPSS 0.01
CVE-2019-2816 MEDIUM
Oracle JDK 7u221, 8u212, 11.0.3, 12.0.1 & Java SE Embedded 8u211 - Network Data Manipulation & Info Disclosure
Jul 23, 2019
CVSS 4.8
EPSS 0.00
CVE-2019-2769 MEDIUM
Oracle JDK 7u221, 8u212, 11.0.3, 12.0.1 & Java SE Embedded 8u211 - Partial DoS via Multiple Protocols
Jul 23, 2019
CVSS 5.3
EPSS 0.01
CVE-2019-2766 LOW
Oracle Java SE <12.0.1 - Networking
Jul 23, 2019
CVSS 3.1
EPSS 0.01
CVE-2019-2762 MEDIUM
Oracle JDK and JRE - Unauthenticated Partial Denial of Service via Multiple Protocols
Jul 23, 2019
CVSS 5.3
EPSS 0.01
CVE-2019-2745 MEDIUM
Oracle Java SE <11.0.3 - Unauthorized Access
Jul 23, 2019
CVSS 5.1
EPSS 0.00
CVE-2019-3592 HIGH
McAfee Agent < 5.6.1 - Privilege Escalation via Directory Control Manipulation
Jul 18, 2019
CVSS 7.2
EPSS 0.00
CVE-2019-3619 MEDIUM
McAfee ePolicy Orchestrator 5.9.x/5.10.0 < Update 4 - Cleartext Transmission of Sensitive Information
Jul 03, 2019
CVSS 6.8
EPSS 0.00
CVE-2019-3632 HIGH
McAfee Enterprise Security Manager < 10.4.0 - Authenticated Path Traversal
Jun 27, 2019
CVSS 8.8
EPSS 0.02
CVE-2019-3631 HIGH
McAfee Enterprise Security Manager < 10.4.0 - Authenticated OS Command Injection via Crafted Parameters
Jun 27, 2019
CVSS 7.2
EPSS 0.03
CVE-2019-3630 HIGH
McAfee Enterprise Security Manager < 10.4.0 - Authenticated OS Command Injection via Crafted Parameters
Jun 27, 2019
CVSS 7.2
EPSS 0.03
CVE-2019-3629 MEDIUM
McAfee ESM <11.2.0, <10.4.0 - Auth Bypass
Jun 27, 2019
CVSS 6.5
EPSS 0.01
CVE-2019-3628 HIGH
McAfee Enterprise Security Manager 11.0.0-11.1.x - Authenticated Privilege Escalation via Incorrect Access Control
Jun 27, 2019
CVSS 8.8
EPSS 0.01
CVE-2019-3602 MEDIUM
McAfee Network Security Manager < 9.1 Update 5 - Authenticated Stored Cross-Site Scripting via Custom Rule
May 15, 2019
CVSS 4.8
EPSS 0.00
CVE-2019-3586 HIGH
McAfee Endpoint Security (ENS) <10.6.1 - Privilege Escalation
May 15, 2019
CVSS 7.5
EPSS 0.00
CVE-2019-2602 HIGH
Oracle JRE 7u211, 8u202, 11.0.2, 12 & Java SE Embedded 8u201 - DoS via Multiple Protocols
Apr 23, 2019
CVSS 7.5
EPSS 0.00
CVE-2019-3612 MEDIUM
McAfee Data Exchange Layer 4.0.0-4.1.1 & Threat Intelligence Exchange 2.0.0-2.3.0 - Sensitive Info Exposure
Apr 10, 2019
CVSS 4.4
EPSS 0.00
CVE-2019-3606 HIGH
McAfee Network Security Manager 9.1-9.1.7.75 and 9.2-9.2.7.31 - Cleartext Storage of Sensitive Information in Web Portal
Mar 26, 2019
CVSS 7.7
EPSS 0.00
CVE-2019-3597 MEDIUM
McAfee Network Security Manager 9.1-9.1.7.75 & 9.2-9.2.7.31 - Authentication Bypass via Expired GUI Session
Mar 26, 2019
CVSS 6.5
EPSS 0.00
CVE-2019-6454 MEDIUM
systemd - Denial of Service via Crafted D-Bus Message
Mar 21, 2019
CVSS 5.5
EPSS 0.00
CVE-2019-3615 MEDIUM
McAfee Database Security < 4.6.6 - Password Exposure via Admin Login Autocomplete
Mar 12, 2019
CVSS 5.3
EPSS 0.00
CVE-2019-3599 HIGH
McAfee Agent 5.0.0-5.0.5 - Unauthenticated Information Disclosure via Remote Logging
Feb 28, 2019
CVSS 7.5
EPSS 0.00
Products
epolicy_orchestrator 86 web_gateway 41 endpoint_security 37 network_data_loss_prevention 31 virusscan_enterprise 29 advanced_threat_defense 26 data_loss_prevention_endpoint 26 total_protection 26 agent 25 email_gateway 20 network_security_manager 19 gateway 13 data_loss_prevention 12 scan_engine 12 email_and_web_security 10 mcafee_agent 10 virusscan 10 antivirus_engine 9 enterprise_security_manager 9 policy_auditor 9 database_security 8 true_key 8 Network Data Loss Prevention (NDLP) 7 active_response 7 application_control 7 security_scan_plus 7 threat_intelligence_exchange_server 7 application_and_change_control 6 e-business_server 6 enterprise_mobility_manager 6
Quick Filters
Critical CVEs With Exploits In CISA KEV