Browse CVEs

HIGH 7.5 CVE-2013-7462 A directory traversal vulnerability in the web application in McAfee (now Intel Security) SaaS Control Console (SCC) Platform 6.14 before patch 1070,… Saas Control Console Platform after 6.15 Fix from $1,9502017-03-14 HIGH 7.5 CVE-2015-8990 Detection bypass vulnerability in Intel Security Advanced Threat Defense (ATD) 3.4.6 and earlier allows malware samples to bypass ATD detection via r… Advanced Threat Defense after 3.4.6 Fix from $1,9502017-03-14 HIGH 7.0 CVE-2015-8991 Malicious file execution vulnerability in Intel Security McAfee Security Scan+ (MSS+) before 3.11.266.3 allows attackers to make the product momentar… Security Webadvisor Mitigation only Fix from $1,9502017-03-14 HIGH 7.0 CVE-2015-8992 Malicious file execution vulnerability in Intel Security WebAdvisor before 4.0.2, 4.0.1 and 3.7.2 allows attackers to make the product momentarily vu… Security Webadvisor Mitigation only Fix from $1,9502017-03-14 HIGH 7.0 CVE-2015-8993 Malicious file execution vulnerability in Intel Security CloudAV (Beta) before 0.5.0.151.3 allows attackers to make the product momentarily vulnerabl… Security Webadvisor Mitigation only Fix from $1,9502017-03-14 MEDIUM 6.5 CVE-2016-8005 File extension filtering vulnerability in Intel Security McAfee Email Gateway (MEG) before 7.6.404h1128596 allows attackers to fail to identify the f… Email Gateway after 7.6.401 Fix from $1,6002017-03-14 MEDIUM 6.3 CVE-2016-8007 Authentication bypass vulnerability in McAfee Host Intrusion Prevention Services (HIPS) 8.0 Patch 7 and earlier allows authenticated users to manipul… Host Intrusion Prevention Services after 8.0 Fix from $1,6002017-03-14 MEDIUM 6.1 CVE-2016-8019 Cross-site scripting (XSS) vulnerability in attributes in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows unauthenticated… Virusscan Enterprise after 2.0.3 Fix from $1,6002017-03-14 MEDIUM 5.9 CVE-2014-9920 Unauthorized execution of binary vulnerability in McAfee (now Intel Security) McAfee Application Control (MAC) 6.0.0 before hotfix 9726, 6.0.1 before… Application Control Mitigation only Fix from $1,6002017-03-14 MEDIUM 5.5 CVE-2013-7460 A write protection and execution bypass vulnerability in McAfee (now Intel Security) Application Control (MAC) 6.1.0 for Linux and earlier allows aut… Application Control after 6.1.0 Fix from $1,6002017-03-14 MEDIUM 5.5 CVE-2013-7461 A write protection and execution bypass vulnerability in McAfee (now Intel Security) Change Control (MCC) 6.1.0 for Linux and earlier allows authenti… Application Control after 6.1.0 Fix from $1,6002017-03-14 MEDIUM 5.5 CVE-2015-8986 Sandbox detection evasion vulnerability in hardware appliances in McAfee (now Intel Security) Advanced Threat Defense (MATD) 3.4.2.32 and earlier all… Advanced Threat Defense after 3.4.2.32 Fix from $1,6002017-03-14 MEDIUM 5.3 CVE-2015-8987 Man-in-the-middle (MitM) attack vulnerability in non-Mac OS agents in McAfee (now Intel Security) Agent (MA) 4.8.0 patch 2 and earlier allows attacke… Agent after 4.8.0 Fix from $1,6002017-03-14 MEDIUM 5.9 CVE-2017-3896 Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 allows remo… Mcafee Agent Mitigation only Fix from $1,6002017-02-13 MEDIUM 5.4 CVE-2017-3902 Cross-site scripting (XSS) vulnerability in the Web user interface (UI) in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authenticated use… Epolicy Orchestrator Patch available Fix from $1,6002017-02-13 HIGH 7.5 CVE-2016-4535EPSS 10% Integer signedness error in the AV engine before DAT 8145, as used in McAfee LiveSafe 14.0, allows remote attackers to cause a denial of service (mem… Livesafe No fix yet Fix from $1,9502016-05-05 MEDIUM 5.1 CVE-2016-3984 The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161, Agent (MA) 5.x before 5.0.2 Hotfix 1110392 (5.0.2.333),… Active Response after 10.0.1 Fix from $1,6002016-04-08 HIGH 7.5 CVE-2016-3983 McAfee Advanced Threat Defense (ATD) before 3.4.8.178 might allow remote attackers to bypass malware detection by leveraging information about the pa… Advanced Threat Defense after 3.4.4.142 Fix from $1,9502016-04-08 MEDIUM 6.1 CVE-2016-3969 Cross-site scripting (XSS) vulnerability in McAfee Email Gateway (MEG) 7.6.x before 7.6.404, when File Filtering is enabled with the action set to ES… Email Gateway Mitigation only Fix from $1,6002016-04-06 HIGH 8.8 CVE-2016-2199 Multiple cross-site request forgery (CSRF) vulnerabilities in the Organizations and Remediation management page in Enterprise Manager in McAfee Vulne… Vulnerability Manager after 7.5.9 Fix from $1,9502016-02-01 CRITICAL 9.1 CVE-2015-8772 McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows local users to obtain sensitive information from kernel memory or cau… File Lock Mitigation only Fix from $2,3002016-01-29 HIGH 7.5 CVE-2015-8773 Stack-based buffer overflow in McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows attackers to cause a denial of service… File Lock Mitigation only Fix from $1,9502016-01-29 HIGH 8.3 CVE-2015-8765 Intel McAfee ePolicy Orchestrator (ePO) 4.6.9 and earlier, 5.0.x, 5.1.x before 5.1.3 Hotfix 1106041, and 5.3.x before 5.3.1 Hotfix 1106041 allow remo… Epolicy Orchestrator 5.1.3 / 5.3.1+ Fix from $1,9502016-01-08 HIGH 9.3 CVE-2015-8024 McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enterprise Security Manager/Receiver (ESMREC) 9.3.x be… Mcafee Enterprise Security Manager Mitigation only Fix from $1,9502015-12-02 MEDIUM 6.8 CVE-2015-7612 Multiple cross-site request forgery (CSRF) vulnerabilities in the Organizations page in Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.… Vulnerability Manager after 7.5.9 Fix from $1,6002015-10-01 MEDIUM 6.5 CVE-2015-7310 McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enterprise Security Manager/Receiver (ESMREC) before 9… Enterprise Security Manager after 9.5.0 Fix from $1,6002015-09-22 MEDIUM 5.0 CVE-2015-7237 Directory traversal vulnerability in the remote log viewing functionality in McAfee Agent (MA) 5.x before 5.0.2 allows remote attackers to obtain sen… Mcafee Agent Mitigation only Fix from $1,6002015-09-18 MEDIUM 5.8 CVE-2015-2859 Intel McAfee ePolicy Orchestrator (ePO) 4.x through 4.6.9 and 5.x through 5.1.2 does not validate server names and Certification Authority names in X… Epolicy Orchestrator Patch available Fix from $1,6002015-06-23 HIGH 7.2 CVE-2015-3987 Multiple unquoted Windows search path vulnerabilities in the (1) Client Management and (2) Gateway in McAfee ePO Deep Command 2.1 and 2.2 before HF 1… Epo Deep Command Mitigation only Fix from $1,9502015-05-14 MEDIUM 5.5 CVE-2015-3028 McAfee Advanced Threat Defense (MATD) before 3.4.4.63 allows remote authenticated users to bypass intended restrictions and change or update configur… Advanced Threat Defense after 3.4.4.14 Fix from $1,6002015-04-08