Browse CVEs

MEDIUM 5.5 CVE-2021-23886 Denial of Service vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a local, low privileged, attacker … Data Loss Prevention Endpoint 11.6.100.41+ Fix from $1,6002021-04-15 MEDIUM 6.5 CVE-2021-23890 Information leak vulnerability in the Agent Handler of McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 allows an unauthenticated user to do… Epolicy Orchestrator 5.9.1+ Fix from $1,6002021-03-26 MEDIUM 6.3 CVE-2021-23888 Unvalidated client-side URL redirect vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 could cause an authenticated ePO user… Epolicy Orchestrator 5.10.0+ Fix from $1,6002021-03-26 HIGH 7.8 CVE-2020-7346 Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) for Windows prior to 11.6.100 allows a local, low privileged, attacker throug… Data Loss Prevention 11.6.100+ Fix from $1,9502021-03-23 MEDIUM 6.7 CVE-2021-23879 Unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool prior to 21.2 allows local administrators to execute arbitrary code… Endpoint Product Removal Tool 21.2+ Fix from $1,6002021-03-15 HIGH 8.8 CVE-2021-23885 Privilege escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.8 allows an authenticated user to gain elevated privileges through the Us… Web Gateway 8.2.17 / 9.2.8+ Fix from $1,9502021-02-17 HIGH 7.8 CVE-2021-23876 Bypass Remote Procedure call in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary … Total Protection 16.0.30+ Fix from $1,9502021-02-10 HIGH 7.8 CVE-2021-23874 KEV Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execu… Total Protection 16.0.30+ Fix from $1,9502021-02-10 MEDIUM 6.1 CVE-2021-23873 Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbi… Total Protection 16.0.30+ Fix from $1,6002021-02-10 MEDIUM 5.0 CVE-2021-23878 Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Updat… Endpoint Security 10.7.0+ Fix from $1,6002021-02-10 MEDIUM 5.5 CVE-2020-7343 Missing Authorization vulnerability in McAfee Agent (MA) for Windows prior to 5.7.1 allows local users to block McAfee product updates by manipulatin… Agent 5.7.1+ Fix from $1,6002021-01-18 MEDIUM 6.5 CVE-2020-7336 Cross Site Request Forgery vulnerability in McAfee Network Security Management (NSM) prior to 10.1.7.35 and NSM 9.x prior to 9.2.9.55 may allow an at… Network Security Management 9.2.9.55 / 10.1.7.35+ Fix from $1,6002021-01-05 MEDIUM 6.3 CVE-2020-7339 Use of a Broken or Risky Cryptographic Algorithm vulnerability in McAfee Database Security Server and Sensor prior to 4.8.0 in the form of a SHA1 sig… Database Security 4.8.0+ Fix from $1,6002020-12-10 MEDIUM 6.7 CVE-2020-7337 Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise (VSE) prior to 8.8 Patch 16 allows local administr… Virusscan Enterprise 8.8+ Fix from $1,6002020-12-09 HIGH 7.8 CVE-2020-7335 Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection (MTP) prior to 16.0.29 allows local users to gain elevated pri… Total Protection 16.0.29+ Fix from $1,9502020-12-01 HIGH 8.8 CVE-2020-7332 Cross Site Request Forgery vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows … Endpoint Security 10.6.1+ Fix from $1,9502020-11-12 HIGH 7.8 CVE-2020-7331 Unquoted service executable path in McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows local users to cause a denial of servi… Endpoint Security 10.6.1+ Fix from $1,9502020-11-12 HIGH 7.2 CVE-2020-7329 Server-side request forgery vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers trigger server-side … Mvision Endpoint 20.11+ Fix from $1,9502020-11-11 HIGH 7.2 CVE-2020-7328 External entity attack vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers to gain control of a reso… Mvision Endpoint 20.11+ Fix from $1,9502020-11-11 MEDIUM 6.7 CVE-2020-7326 Improperly implemented security check in McAfee Active Response (MAR) prior to 2.4.4 may allow local administrators to execute malicious code via sto… Active Response 2.4.4+ Fix from $1,6002020-10-15 MEDIUM 6.7 CVE-2020-7327 Improperly implemented security check in McAfee MVISION Endpoint Detection and Response Client (MVEDR) prior to 3.2.0 may allow local administrators … Mvision Endpoint Detection And Response 3.2.0+ Fix from $1,6002020-10-15 HIGH 8.2 CVE-2020-7334 Improper privilege assignment vulnerability in the installer McAfee Application and Change Control (MACC) prior to 8.3.2 allows local administrators … Application And Change Control 8.3.2+ Fix from $1,9502020-10-15 HIGH 8.8 CVE-2020-7330 Privilege Escalation vulnerability in McAfee Total Protection (MTP) trial prior to 4.0.176.1 allows local users to schedule tasks which call maliciou… Total Protection 4.0.176.1+ Fix from $1,9502020-10-14 HIGH 7.8 CVE-2020-7316 Unquoted service path vulnerability in McAfee File and Removable Media Protection (FRP) prior to 5.3.0 allows local users to execute arbitrary code, … File And Removable Media Protection 5.3.0+ Fix from $1,9502020-10-07 MEDIUM 5.7 CVE-2020-7297 Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected dashboard … Web Gateway 7.8.2.22 / 8.2.9+ Fix from $1,6002020-09-16 CRITICAL 9.0 CVE-2020-7293 Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change… Web Gateway 7.8.2.23 / 8.2.11+ Fix from $2,3002020-09-15 MEDIUM 5.7 CVE-2020-7296 Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected configurat… Web Gateway 7.8.2.23 / 8.2.11+ Fix from $1,6002020-09-15 HIGH 7.8 CVE-2020-7312 DLL Search Order Hijacking Vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary cod… Mcafee Agent 5.6.6+ Fix from $1,9502020-09-10 HIGH 7.8 CVE-2020-7314 Privilege Escalation Vulnerability in the installer in McAfee Data Exchange Layer (DXL) Client for Mac shipped with McAfee Agent (MA) for Mac prior t… Mcafee Agent 5.6.6+ Fix from $1,9502020-09-10 MEDIUM 6.7 CVE-2020-7315 DLL Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code via careful placement of a m… Mcafee Agent 5.6.6+ Fix from $1,6002020-09-10