Vulnerability index

Browse CVEs

391 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Advanced Threat Defense HIGH 8.8
CVE-2019-3660

Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute command…

Fix: 4.8+
Fix from $1,950 2019-11-13
Advanced Threat Defense HIGH 8.8
CVE-2019-3651

Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to ePO …

Fix: 4.8+
Fix from $1,950 2019-11-13
Advanced Threat Defense MEDIUM 6.5
CVE-2019-3649

Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attackers to gain access to has…

Fix: 4.8+
Fix from $1,600 2019-11-13
Advanced Threat Defense MEDIUM 6.5
CVE-2019-3650

Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to the …

Fix: 4.8+
Fix from $1,600 2019-11-13
Anti Virus Plus MEDIUM 6.7
CVE-2019-3648

A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute…

Fix: after 16.0r22
Fix from $1,600 2019-11-13
Total Protection HIGH 7.8
CVE-2019-3636

A File Masquerade vulnerability in McAfee Total Protection (MTP) version 16.0.R21 and earlier in Windows client allowed an attacker to read the plain…

Fix: after 16.0.r21
Fix from $1,950 2019-10-28
Endpoint Security MEDIUM 5.5
CVE-2019-3653

Improper access control vulnerability in Configuration tool in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user t…

Fix: 10.6.1+
Fix from $1,600 2019-10-09
Endpoint Security MEDIUM 5.3
CVE-2019-3652

Code Injection vulnerability in EPSetup.exe in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to get their mali…

Fix: 10.6.1+
Fix from $1,600 2019-10-09
Total Protection MEDIUM 6.5
CVE-2019-3646

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Free Antivirus Trial 16.0.R18 and earlier allow…

Fix: after 16.0.r18
Fix from $1,600 2019-09-13
Web Gateway CRITICAL 9.6
CVE-2019-3638

Reflected Cross Site Scripting vulnerability in Administrators web console in McAfee Web Gateway (MWG) 7.8.x prior to 7.8.2.13 allows remote attacker…

Fix: 7.8.2.13 / 8.2.0+
Fix from $2,300 2019-09-12
Active Response HIGH 7.5
CVE-2019-3643

McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, potentially leading to a denial of servic…

Fix: 7.7.2.24 / 7.8.2.13+
Fix from $1,950 2019-09-11
Active Response HIGH 7.5
CVE-2019-3644

McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of servic…

Fix: 7.7.2.24 / 7.8.2.13+
Fix from $1,950 2019-09-11
Data Loss Prevention Endpoint MEDIUM 5.5
CVE-2019-3634

Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "…

Fix: 11.3.2.82+
Fix from $1,600 2019-08-21
Data Loss Prevention Endpoint MEDIUM 5.5
CVE-2019-3633

Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "…

Fix: 11.3.2.82+
Fix from $1,600 2019-08-21
Web Gateway HIGH 7.1
CVE-2019-3639

Clickjack vulnerability in Adminstrator web console in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows remote attackers to conduct clickjac…

Fix: 7.8.2.12+
Fix from $1,950 2019-08-14
File And Removable Media Protection MEDIUM 6.7
CVE-2019-3637

Privilege Escalation vulnerability in McAfee FRP 5.x prior to 5.1.0.209 allows local users to gain elevated privileges via running McAfee Tray with e…

Fix: 5.1.0.209+
Fix from $1,600 2019-08-14
Web Gateway MEDIUM 6.5
CVE-2019-3635

Exfiltration of Data in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows attackers to obtain sensitive data via crafting a complex webpage t…

Fix: 7.8.2.12+
Fix from $1,600 2019-08-14
Data Loss Prevention Endpoint MEDIUM 6.2
CVE-2019-3621

Authentication protection bypass vulnerability in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows physical local user to b…

Fix: 11.1.200 / 11.3.0+
Fix from $1,600 2019-07-25
Data Loss Prevention Endpoint HIGH 8.2
CVE-2019-3622

Files or Directories Accessible to External Parties in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows authenticated user …

Fix: 11.1.200 / 11.3.0+
Fix from $1,950 2019-07-24
Data Loss Prevention Endpoint MEDIUM 6.5
CVE-2019-3595

Improper Neutralization of Special Elements used in a Command ('Command Injection') in ePO extension in McAfee Data Loss Prevention (DLP) 11.x prior …

Fix: 11.1.200 / 11.3.0+
Fix from $1,600 2019-07-24
Data Loss Prevention Endpoint MEDIUM 6.1
CVE-2019-3591

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in ePO extension in McAfee Data Loss Prevention (DLPe) for Windo…

Fix: 11.1.200 / 11.3.0+
Fix from $1,600 2019-07-24
Agent MEDIUM 6.7
CVE-2019-3592

Privilege escalation vulnerability in McAfee Agent (MA) before 5.6.1 HF3, allows local administrator users to potentially disable some McAfee process…

Fix: after 5.6.1
Fix from $1,600 2019-07-18
Enterprise Security Manager HIGH 8.8
CVE-2019-3632

Directory Traversal vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to gain e…

Fix: 10.4.0 / 11.2.0+
Fix from $1,950 2019-06-27
Enterprise Security Manager HIGH 7.2
CVE-2019-3630

Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute …

Fix: 10.4.0 / 11.2.0+
Fix from $1,950 2019-06-27
Enterprise Security Manager HIGH 7.2
CVE-2019-3631

Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute …

Fix: 10.4.0 / 11.2.0+
Fix from $1,950 2019-06-27
Enterprise Security Manager MEDIUM 6.5
CVE-2019-3629

Application protection bypass vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows unauthenticated us…

Fix: 10.4.0 / 11.2.0+
Fix from $1,600 2019-06-27
Enterprise Security Manager HIGH 8.8
CVE-2019-3628

Privilege escalation in McAfee Enterprise Security Manager (ESM) 11.x prior to 11.2.0 allows authenticated user to gain access to a core system compo…

Fix: 11.2.0+
Fix from $1,950 2019-06-27
Endpoint Security HIGH 7.5
CVE-2019-3586

Protection Mechanism Failure in the Firewall in McAfee Endpoint Security (ENS) 10.x prior to 10.6.1 May 2019 update allows context-dependent attacker…

Fix: after 10.6.1
Fix from $1,950 2019-05-15
Network Security Manager CRITICAL 9.8
CVE-2019-3597

Authentication Bypass vulnerability in McAfee Network Security Manager (NSM) 9.1 < 9.1.7.75.2 and 9.2 < 9.2.7.31 (9.2 Update 2) allows unauthenticate…

Fix: 9.1.7.75 / 9.2.7.31+
Fix from $2,300 2019-03-26
Database Security MEDIUM 6.8
CVE-2019-3615

Data Leakage Attacks vulnerability in the web interface in McAfee Database Security prior to the 4.6.6 March 2019 update allows local users to expose…

Fix: after 4.6.6
Fix from $1,600 2019-03-12