mcafee

602 tracked vulnerabilities.

CVE-2017-3961 LOW
McAfee Network Security Manager < 8.2.7.42.2 - Authenticated Cross-Site Scripting via Crafted User Input
May 25, 2018
CVSS 3.5
EPSS 0.00
CVE-2017-3971 HIGH
McAfee NSM <8.2.7.42.2 - Info Disclosure
Apr 04, 2018
CVSS 8.2
EPSS 0.00
CVE-2017-3969 HIGH
McAfee NSM <8.2.7.42.2 - Info Disclosure
Apr 04, 2018
CVSS 8.2
EPSS 0.00
CVE-2017-3967 MEDIUM
McAfee Network Security Manager < 8.2.7.42.2 - Cross-Site Scripting via Frame Injection
Apr 04, 2018
CVSS 6.1
EPSS 0.00
CVE-2017-3966 MEDIUM
McAfee Network Security Manager < 8.2.7.42.2 - Session Fixation via Exposed Session Token
Apr 04, 2018
CVSS 6.4
EPSS 0.00
CVE-2017-3965 HIGH
McAfee Network Security Manager < 8.2.7.42.2 - Cross-Site Request Forgery
Apr 04, 2018
CVSS 8.8
EPSS 0.00
CVE-2017-3964 LOW
McAfee Network Security Manager < 8.2.7.42.2 - Reflective Cross-Site Scripting via URL Parameter
Apr 04, 2018
CVSS 3.5
EPSS 0.00
CVE-2017-4028 MEDIUM
McAfee Anti-Virus Plus - Authenticated Code Injection via Registry Manipulation
Apr 03, 2018
CVSS 5.0
EPSS 0.00
CVE-2017-3972 HIGH
McAfee NSM <8.2.7.42.2 - Info Disclosure
Apr 03, 2018
CVSS 8.3
EPSS 0.01
CVE-2017-17740 HIGH
OpenLDAP < 2.4.45 - Denial of Service via Member MODDN Operation
Dec 18, 2017
CVSS 7.5
EPSS 0.07
CVE-2017-3935 HIGH
Network Data Loss Prevention - MIME Sniffing
Oct 31, 2017
CVSS 7.5
EPSS 0.00
CVE-2017-3934 MEDIUM
McAfee NDLP <9.3.x - Info Disclosure
Oct 31, 2017
CVSS 5.9
EPSS 0.00
CVE-2017-3933 MEDIUM
McAfee Network Data Loss Prevention 9.3.x - Authenticated Cross-Site Scripting via HTTP Headers
Oct 31, 2017
CVSS 5.4
EPSS 0.00
CVE-2017-3898 MEDIUM
McAfee LiveSafe <16.0.3 - Privilege Escalation
Sep 01, 2017
CVSS 5.9
EPSS 0.07
CVE-2017-3897 CRITICAL
McAfee Live Safe <16.0.3, MSS+ <3.11.599.3 - Code Injection
Sep 01, 2017
CVSS 9.8
EPSS 0.04
CVE-2017-4057 HIGH
McAfee ATD <3.10 - Privilege Escalation
Jul 12, 2017
CVSS 8.8
EPSS 0.01
CVE-2017-4055 HIGH
McAfee Advanced Threat Defense 3.4-3.10 - Unauthenticated Detection Bypass via Web Interface
Jul 12, 2017
CVSS 7.5
EPSS 0.01
CVE-2017-4054 HIGH
McAfee ATD <3.10-3.4 - Command Injection
Jul 12, 2017
CVSS 8.8
EPSS 0.04
CVE-2017-4053 CRITICAL
McAfee ATD <3.10-3.4 - Command Injection
Jul 12, 2017
CVSS 9.8
EPSS 0.04
CVE-2017-4052 CRITICAL
McAfee Advanced Threat Defense 3.4-3.10 - Authentication Bypass via HTTP Request
Jul 12, 2017
CVSS 9.8
EPSS 0.00
CVE-2017-3948 MEDIUM
McAfee Data Loss Prevention Endpoint 10.0.x - Authenticated Cross-Site Scripting via IMG Tag Injection
Jun 23, 2017
CVSS 5.4
EPSS 0.00
CVE-2017-1000366 HIGH
glibc <2.25 - Remote Code Execution
Jun 19, 2017
CVSS 7.8
EPSS 0.09
CVE-2017-9287 MEDIUM
OpenLDAP <2.4.44 - Memory Corruption
May 29, 2017
CVSS 6.5
EPSS 0.27
CVE-2017-3980 HIGH
McAfee ePO <5.9.0-5.1.3 - Path Traversal
May 18, 2017
CVSS 7.2
EPSS 0.03
CVE-2017-4017 MEDIUM
McAfee Network Data Loss Prevention < 9.3.0 - User Name Disclosure via Appliance Web Interface
May 17, 2017
CVSS 5.3
EPSS 0.00
Products
epolicy_orchestrator 86 web_gateway 41 endpoint_security 37 network_data_loss_prevention 31 virusscan_enterprise 29 advanced_threat_defense 26 data_loss_prevention_endpoint 26 total_protection 26 agent 25 email_gateway 20 network_security_manager 19 gateway 13 data_loss_prevention 12 scan_engine 12 email_and_web_security 10 mcafee_agent 10 virusscan 10 antivirus_engine 9 enterprise_security_manager 9 policy_auditor 9 database_security 8 true_key 8 Network Data Loss Prevention (NDLP) 7 active_response 7 application_control 7 security_scan_plus 7 threat_intelligence_exchange_server 7 application_and_change_control 6 e-business_server 6 enterprise_mobility_manager 6
Quick Filters
Critical CVEs With Exploits In CISA KEV