Vulnerability index

Browse CVEs

391 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Data Loss Prevention Endpoint MEDIUM 5.5
CVE-2021-23886

Denial of Service vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a local, low privileged, attacker …

Fix: 11.6.100.41+
Fix from $1,600 2021-04-15
Epolicy Orchestrator MEDIUM 6.5
CVE-2021-23890

Information leak vulnerability in the Agent Handler of McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 allows an unauthenticated user to do…

Fix: 5.9.1+
Fix from $1,600 2021-03-26
Epolicy Orchestrator MEDIUM 6.3
CVE-2021-23888

Unvalidated client-side URL redirect vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 could cause an authenticated ePO user…

Fix: 5.10.0+
Fix from $1,600 2021-03-26
Data Loss Prevention HIGH 7.8
CVE-2020-7346

Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) for Windows prior to 11.6.100 allows a local, low privileged, attacker throug…

Fix: 11.6.100+
Fix from $1,950 2021-03-23
Endpoint Product Removal Tool MEDIUM 6.7
CVE-2021-23879

Unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool prior to 21.2 allows local administrators to execute arbitrary code…

Fix: 21.2+
Fix from $1,600 2021-03-15
Web Gateway HIGH 8.8
CVE-2021-23885

Privilege escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.8 allows an authenticated user to gain elevated privileges through the Us…

Fix: 8.2.17 / 9.2.8+
Fix from $1,950 2021-02-17
Total Protection HIGH 7.8
CVE-2021-23876

Bypass Remote Procedure call in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary …

Fix: 16.0.30+
Fix from $1,950 2021-02-10
Total Protection HIGH 7.8
CVE-2021-23874 KEV

Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execu…

Fix: 16.0.30+
Fix from $1,950 2021-02-10
Total Protection MEDIUM 6.1
CVE-2021-23873

Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbi…

Fix: 16.0.30+
Fix from $1,600 2021-02-10
Endpoint Security MEDIUM 5.0
CVE-2021-23878

Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Updat…

Fix: 10.7.0+
Fix from $1,600 2021-02-10
Agent MEDIUM 5.5
CVE-2020-7343

Missing Authorization vulnerability in McAfee Agent (MA) for Windows prior to 5.7.1 allows local users to block McAfee product updates by manipulatin…

Fix: 5.7.1+
Fix from $1,600 2021-01-18
Network Security Management MEDIUM 6.5
CVE-2020-7336

Cross Site Request Forgery vulnerability in McAfee Network Security Management (NSM) prior to 10.1.7.35 and NSM 9.x prior to 9.2.9.55 may allow an at…

Fix: 9.2.9.55 / 10.1.7.35+
Fix from $1,600 2021-01-05
Database Security MEDIUM 6.3
CVE-2020-7339

Use of a Broken or Risky Cryptographic Algorithm vulnerability in McAfee Database Security Server and Sensor prior to 4.8.0 in the form of a SHA1 sig…

Fix: 4.8.0+
Fix from $1,600 2020-12-10
Virusscan Enterprise MEDIUM 6.7
CVE-2020-7337

Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise (VSE) prior to 8.8 Patch 16 allows local administr…

Fix: 8.8+
Fix from $1,600 2020-12-09
Total Protection HIGH 7.8
CVE-2020-7335

Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection (MTP) prior to 16.0.29 allows local users to gain elevated pri…

Fix: 16.0.29+
Fix from $1,950 2020-12-01
Endpoint Security HIGH 8.8
CVE-2020-7332

Cross Site Request Forgery vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows …

Fix: 10.6.1+
Fix from $1,950 2020-11-12
Endpoint Security HIGH 7.8
CVE-2020-7331

Unquoted service executable path in McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows local users to cause a denial of servi…

Fix: 10.6.1+
Fix from $1,950 2020-11-12
Mvision Endpoint HIGH 7.2
CVE-2020-7329

Server-side request forgery vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers trigger server-side …

Fix: 20.11+
Fix from $1,950 2020-11-11
Mvision Endpoint HIGH 7.2
CVE-2020-7328

External entity attack vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers to gain control of a reso…

Fix: 20.11+
Fix from $1,950 2020-11-11
Active Response MEDIUM 6.7
CVE-2020-7326

Improperly implemented security check in McAfee Active Response (MAR) prior to 2.4.4 may allow local administrators to execute malicious code via sto…

Fix: 2.4.4+
Fix from $1,600 2020-10-15
Mvision Endpoint Detection And Response MEDIUM 6.7
CVE-2020-7327

Improperly implemented security check in McAfee MVISION Endpoint Detection and Response Client (MVEDR) prior to 3.2.0 may allow local administrators …

Fix: 3.2.0+
Fix from $1,600 2020-10-15
Application And Change Control HIGH 8.2
CVE-2020-7334

Improper privilege assignment vulnerability in the installer McAfee Application and Change Control (MACC) prior to 8.3.2 allows local administrators …

Fix: 8.3.2+
Fix from $1,950 2020-10-15
Total Protection HIGH 8.8
CVE-2020-7330

Privilege Escalation vulnerability in McAfee Total Protection (MTP) trial prior to 4.0.176.1 allows local users to schedule tasks which call maliciou…

Fix: 4.0.176.1+
Fix from $1,950 2020-10-14
File And Removable Media Protection HIGH 7.8
CVE-2020-7316

Unquoted service path vulnerability in McAfee File and Removable Media Protection (FRP) prior to 5.3.0 allows local users to execute arbitrary code, …

Fix: 5.3.0+
Fix from $1,950 2020-10-07
Web Gateway MEDIUM 5.7
CVE-2020-7297

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected dashboard …

Fix: 7.8.2.22 / 8.2.9+
Fix from $1,600 2020-09-16
Web Gateway CRITICAL 9.0
CVE-2020-7293

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change…

Fix: 7.8.2.23 / 8.2.11+
Fix from $2,300 2020-09-15
Web Gateway MEDIUM 5.7
CVE-2020-7296

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected configurat…

Fix: 7.8.2.23 / 8.2.11+
Fix from $1,600 2020-09-15
Mcafee Agent HIGH 7.8
CVE-2020-7312

DLL Search Order Hijacking Vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary cod…

Fix: 5.6.6+
Fix from $1,950 2020-09-10
Mcafee Agent HIGH 7.8
CVE-2020-7314

Privilege Escalation Vulnerability in the installer in McAfee Data Exchange Layer (DXL) Client for Mac shipped with McAfee Agent (MA) for Mac prior t…

Fix: 5.6.6+
Fix from $1,950 2020-09-10
Mcafee Agent MEDIUM 6.7
CVE-2020-7315

DLL Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code via careful placement of a m…

Fix: 5.6.6+
Fix from $1,600 2020-09-10