Vulnerability index

Browse CVEs

391 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Active Response HIGH 7.8
CVE-2020-7289

Privilege Escalation vulnerability in McAfee Active Response (MAR) for Windows prior to 2.4.3 Hotfix 1 allows a malicious script or program to perfor…

Fix: 2.4.3+
Fix from $1,950 2020-05-08
Active Response HIGH 7.8
CVE-2020-7290

Privilege Escalation vulnerability in McAfee Active Response (MAR) for Linux prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform …

Fix: 2.4.3+
Fix from $1,950 2020-05-08
Active Response HIGH 7.8
CVE-2020-7291

Privilege Escalation vulnerability in McAfee Active Response (MAR) for Mac prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform fu…

Fix: 2.4.3+
Fix from $1,950 2020-05-08
Endpoint Security HIGH 8.4
CVE-2020-7264

Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 Hotfix 199847 allows local users to delete files the…

Fix: 10.5.5+
Fix from $1,950 2020-05-08
Endpoint Security HIGH 8.4
CVE-2020-7265

Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Mac prior to 10.6.9 allows local users to delete files the user would otherw…

Fix: 10.6.9+
Fix from $1,950 2020-05-08
Virusscan Enterprise HIGH 8.4
CVE-2020-7266

Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Windows prior to 8.8 Patch 14 Hotfix 116778 allows local users to delete …

Fix: 1.9.2 / 2.0.3+
Fix from $1,950 2020-05-08
Endpoint Security HIGH 7.8
CVE-2020-7250

Symbolic link manipulation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows authenticated loca…

Mitigation only
Fix from $1,950 2020-04-15
Endpoint Security HIGH 7.8
CVE-2020-7259

Exploitation of Privilege/Trust vulnerability in file in McAfee Endpoint Security (ENS) Prior to 10.7.0 February 2020 Update allows local users to by…

Mitigation only
Fix from $1,950 2020-04-15
Endpoint Security HIGH 7.8
CVE-2020-7274

Privilege escalation vulnerability in McTray.exe in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users t…

Mitigation only
Fix from $1,950 2020-04-15
Endpoint Security MEDIUM 6.7
CVE-2020-7276

Authentication bypass vulnerability in MfeUpgradeTool in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows administ…

Mitigation only
Fix from $1,600 2020-04-15
Endpoint Security MEDIUM 5.5
CVE-2020-7261

Buffer Overflow via Environment Variables vulnerability in AMSI component in McAfee Endpoint Security (ENS) Prior to 10.7.0 February 2020 Update allo…

Mitigation only
Fix from $1,600 2020-04-15
Endpoint Security MEDIUM 5.5
CVE-2020-7273

Accessing functionality not properly constrained by ACLs vulnerability in the autorun start-up protection in McAfee Endpoint Security (ENS) for Windo…

Mitigation only
Fix from $1,600 2020-04-15
Endpoint Security MEDIUM 5.3
CVE-2020-7275

Accessing, modifying or executing executable files vulnerability in the uninstaller in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 Apr…

Mitigation only
Fix from $1,600 2020-04-15
Endpoint Security MEDIUM 5.3
CVE-2020-7277

Protection mechanism failure in all processes in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows local users to s…

Mitigation only
Fix from $1,600 2020-04-15
Endpoint Security MEDIUM 6.3
CVE-2020-7257

Privilege escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows local users to cause the…

Mitigation only
Fix from $1,600 2020-04-15
Endpoint Security MEDIUM 6.5
CVE-2020-7278

Exploiting incorrectly configured access control security levels vulnerability in ENS Firewall in McAfee Endpoint Security (ENS) for Windows prior to…

Mitigation only
Fix from $1,600 2020-04-15
Endpoint Security MEDIUM 6.7
CVE-2020-7263

Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security (ENS) for Windows all current versions allows local administrat…

Mitigation only
Fix from $1,600 2020-04-01
Application And Change Control HIGH 7.8
CVE-2020-7260

DLL Side Loading vulnerability in the installer for McAfee Application and Change Control (MACC) prior to 8.3 allows local users to execute arbitrary…

Fix: 8.3.0+
Fix from $1,950 2020-03-26
Advanced Threat Defense HIGH 7.8
CVE-2020-7254

Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to exe…

Fix: 4.8.2+
Fix from $1,950 2020-03-12
Web Advisor MEDIUM 6.1
CVE-2019-3670

Remote Code Execution vulnerability in the web interface in McAfee Web Advisor (WA) 8.0.34745 and earlier allows remote unauthenticated attacker to e…

Fix: after 8.0.34745
Fix from $1,600 2020-02-24
Data Exchange Layer MEDIUM 5.5
CVE-2020-7252

Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6.0.0 and earlier allows local users to cause a denial o…

Fix: after 6.0.0
Fix from $1,600 2020-02-17
Endpoint Security MEDIUM 5.5
CVE-2020-7251

Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 February 2020 Update allows loca…

Fix: 10.6.1+
Fix from $1,600 2020-02-14
Techcheck HIGH 7.8
CVE-2019-3667

DLL Search Order Hijacking vulnerability in the Microsoft Windows client in McAfee Tech Check 3.0.0.17 and earlier allows local users to execute arbi…

Fix: after 3.0.0.17
Fix from $1,950 2019-12-11
Webadvisor MEDIUM 6.5
CVE-2019-3666

API Abuse/Misuse vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthenticated attacker to allow the …

Fix: 4.1.1.48+
Fix from $1,600 2019-12-03
Webadvisor MEDIUM 6.5
CVE-2019-3665

Code Injection vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthenticated attacker to allow the br…

Fix: 4.1.1.48+
Fix from $1,600 2019-12-03
Client Proxy HIGH 8.6
CVE-2019-3654

Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy (MCP) prior to 3.0.0 allows local user to bypass scanning …

Fix: 3.0.0+
Fix from $1,950 2019-11-22
Advanced Threat Defense HIGH 8.8
CVE-2019-3661

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remo…

Fix: 4.8+
Fix from $1,950 2019-11-14
Advanced Threat Defense HIGH 7.8
CVE-2019-3663

Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows local attacker to gain access to the roo…

Fix: 4.8+
Fix from $1,950 2019-11-14
Data Loss Prevention MEDIUM 6.5
CVE-2019-3640

Unprotected Transport of Credentials in ePO extension in McAfee Data Loss Prevention 11.x prior to 11.4.0 allows remote attackers with access to the …

Fix: after 11.4.0
Fix from $1,600 2019-11-14
Advanced Threat Defense MEDIUM 6.5
CVE-2019-3662

Path Traversal: '/absolute/pathname/here' vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to …

Fix: 4.8+
Fix from $1,600 2019-11-14