mcafee

602 tracked vulnerabilities.

CVE-2020-7314 HIGH
McAfee Agent for Mac < 5.6.6 - Privilege Escalation via Incorrect Temporary File Permissions
Sep 10, 2020
CVSS 8.2
EPSS 0.00
CVE-2020-7312 HIGH
McAfee Agent < 5.6.6 - DLL Search Order Hijacking via Installer
Sep 10, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-7311 HIGH
McAfee Agent < 5.6.6 - Privilege Escalation via Log File Manipulation
Sep 10, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-7325 MEDIUM
McAfee MVISION Endpoint < 20.9 - Privilege Escalation via Symbolic Link Manipulation
Sep 09, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-7324 MEDIUM
McAfee MVISION Endpoint < 20.9 - Improper Access Control via Incorrectly Applied Permissions
Sep 09, 2020
CVSS 6.1
EPSS 0.00
CVE-2020-7323 MEDIUM
McAfee Endpoint Security < 10.7.0 - Authentication Bypass via Windows Lock Screen Detection Event
Sep 09, 2020
CVSS 6.9
EPSS 0.00
CVE-2020-7322 MEDIUM
McAfee Endpoint Security < 10.7.0 - Sensitive Information Disclosure via Debug Log
Sep 09, 2020
CVSS 4.7
EPSS 0.00
CVE-2020-7320 MEDIUM
McAfee ENS <10.7.0 - Privilege Escalation
Sep 09, 2020
CVSS 6.7
EPSS 0.00
CVE-2020-7319 HIGH
McAfee Endpoint Security < 10.7.0 - Improper Access Control via Symbolic Link Manipulation
Sep 09, 2020
CVSS 8.8
EPSS 0.00
CVE-2020-7299 MEDIUM
McAfee True Key < 6.2.109.2 - Cleartext Storage of Sensitive Information in Memory
Sep 04, 2020
CVSS 5.0
EPSS 0.00
CVE-2020-7309 LOW
McAfee Application Control < 8.3.1 - Authenticated Stored Cross-Site Scripting in Policy Discovery Section
Aug 26, 2020
CVSS 3.9
EPSS 0.00
CVE-2020-7310 MEDIUM
McAfee Total Protection < 4.0.161.1 - Privilege Escalation via Symbolic Link Manipulation
Aug 21, 2020
CVSS 6.9
EPSS 0.00
CVE-2020-7307 MEDIUM
McAfee Data Loss Prevention for Mac < 11.5.2 - Unprotected Storage of Credentials in Log Files
Aug 13, 2020
CVSS 5.2
EPSS 0.00
CVE-2020-7306 MEDIUM
McAfee Data Loss Prevention for Mac < 11.5.2 - Unprotected Storage of Credentials in Log Files
Aug 13, 2020
CVSS 5.2
EPSS 0.00
CVE-2020-7305 MEDIUM
McAfee Data Loss Prevention < 11.3.28 - Privilege Escalation via Incorrect Credential Validation
Aug 13, 2020
CVSS 6.7
EPSS 0.00
CVE-2020-7304 HIGH
McAfee Data Loss Prevention < 11.3.28 - Authenticated Cross-Site Request Forgery via Label Addition
Aug 13, 2020
CVSS 7.6
EPSS 0.00
CVE-2020-7303 MEDIUM
McAfee Data Loss Prevention 11.3.0-11.3.28 - Authenticated Stored Cross-Site Scripting via Label Addition
Aug 13, 2020
CVSS 4.1
EPSS 0.00
CVE-2020-7302 MEDIUM
McAfee Data Loss Prevention 11.3.0-11.3.28 - Authenticated Unrestricted File Upload
Aug 13, 2020
CVSS 5.4
EPSS 0.01
CVE-2020-7301 MEDIUM
McAfee Data Loss Prevention < 11.3.28 - Authenticated Cross-Site Scripting via File Upload Tab
Aug 12, 2020
CVSS 4.1
EPSS 0.00
CVE-2020-7300 MEDIUM
McAfee Data Loss Prevention < 11.3.28 - Authenticated Configuration Change via HTTP Post Messages
Aug 12, 2020
CVSS 4.6
EPSS 0.00
CVE-2020-7298 HIGH
McAfee Total Protection <16.0.R26 - Privilege Escalation
Aug 05, 2020
CVSS 7.5
EPSS 0.00
CVE-2020-14621 MEDIUM
Oracle OpenJDK 7u261, 8u251, 11.0.7, 14.0.1 and Java SE Embedded 8u251 - Unauthenticated Data Manipulation in JAXP
Jul 15, 2020
CVSS 5.3
EPSS 0.00
CVE-2020-14581 LOW
Oracle Java SE <14.0.1 - Info Disclosure
Jul 15, 2020
CVSS 3.7
EPSS 0.00
CVE-2020-14579 LOW
Oracle OpenJDK 7u261 and 8u251 - Unauthenticated Partial Denial of Service via Multiple Protocols
Jul 15, 2020
CVSS 3.7
EPSS 0.00
CVE-2020-14578 LOW
Oracle OpenJDK 7u261 and 8u251 - Unauthenticated Partial Denial of Service via Multiple Protocols
Jul 15, 2020
CVSS 3.7
EPSS 0.00
Products
epolicy_orchestrator 86 web_gateway 41 endpoint_security 37 network_data_loss_prevention 31 virusscan_enterprise 29 advanced_threat_defense 26 data_loss_prevention_endpoint 26 total_protection 26 agent 25 email_gateway 20 network_security_manager 19 gateway 13 data_loss_prevention 12 scan_engine 12 email_and_web_security 10 mcafee_agent 10 virusscan 10 antivirus_engine 9 enterprise_security_manager 9 policy_auditor 9 database_security 8 true_key 8 Network Data Loss Prevention (NDLP) 7 active_response 7 application_control 7 security_scan_plus 7 threat_intelligence_exchange_server 7 application_and_change_control 6 e-business_server 6 enterprise_mobility_manager 6
Quick Filters
Critical CVEs With Exploits In CISA KEV