Browse CVEs

HIGH 8.8 CVE-2019-3660 Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute command… Advanced Threat Defense 4.8+ Fix from $1,9502019-11-13 HIGH 8.8 CVE-2019-3651 Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to ePO … Advanced Threat Defense 4.8+ Fix from $1,9502019-11-13 MEDIUM 6.5 CVE-2019-3649 Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attackers to gain access to has… Advanced Threat Defense 4.8+ Fix from $1,6002019-11-13 MEDIUM 6.5 CVE-2019-3650 Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to the … Advanced Threat Defense 4.8+ Fix from $1,6002019-11-13 MEDIUM 6.7 CVE-2019-3648 A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute… Anti Virus Plus after 16.0r22 Fix from $1,6002019-11-13 HIGH 7.8 CVE-2019-3636 A File Masquerade vulnerability in McAfee Total Protection (MTP) version 16.0.R21 and earlier in Windows client allowed an attacker to read the plain… Total Protection after 16.0.r21 Fix from $1,9502019-10-28 MEDIUM 5.5 CVE-2019-3653 Improper access control vulnerability in Configuration tool in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user t… Endpoint Security 10.6.1+ Fix from $1,6002019-10-09 MEDIUM 5.3 CVE-2019-3652 Code Injection vulnerability in EPSetup.exe in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to get their mali… Endpoint Security 10.6.1+ Fix from $1,6002019-10-09 MEDIUM 6.5 CVE-2019-3646 DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Free Antivirus Trial 16.0.R18 and earlier allow… Total Protection after 16.0.r18 Fix from $1,6002019-09-13 CRITICAL 9.6 CVE-2019-3638 Reflected Cross Site Scripting vulnerability in Administrators web console in McAfee Web Gateway (MWG) 7.8.x prior to 7.8.2.13 allows remote attacker… Web Gateway 7.8.2.13 / 8.2.0+ Fix from $2,3002019-09-12 HIGH 7.5 CVE-2019-3643 McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, potentially leading to a denial of servic… Active Response 7.7.2.24 / 7.8.2.13+ Fix from $1,9502019-09-11 HIGH 7.5 CVE-2019-3644 McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of servic… Active Response 7.7.2.24 / 7.8.2.13+ Fix from $1,9502019-09-11 MEDIUM 5.5 CVE-2019-3634 Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "… Data Loss Prevention Endpoint 11.3.2.82+ Fix from $1,6002019-08-21 MEDIUM 5.5 CVE-2019-3633 Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "… Data Loss Prevention Endpoint 11.3.2.82+ Fix from $1,6002019-08-21 HIGH 7.1 CVE-2019-3639 Clickjack vulnerability in Adminstrator web console in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows remote attackers to conduct clickjac… Web Gateway 7.8.2.12+ Fix from $1,9502019-08-14 MEDIUM 6.7 CVE-2019-3637 Privilege Escalation vulnerability in McAfee FRP 5.x prior to 5.1.0.209 allows local users to gain elevated privileges via running McAfee Tray with e… File And Removable Media Protection 5.1.0.209+ Fix from $1,6002019-08-14 MEDIUM 6.5 CVE-2019-3635 Exfiltration of Data in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows attackers to obtain sensitive data via crafting a complex webpage t… Web Gateway 7.8.2.12+ Fix from $1,6002019-08-14 MEDIUM 6.2 CVE-2019-3621 Authentication protection bypass vulnerability in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows physical local user to b… Data Loss Prevention Endpoint 11.1.200 / 11.3.0+ Fix from $1,6002019-07-25 HIGH 8.2 CVE-2019-3622 Files or Directories Accessible to External Parties in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows authenticated user … Data Loss Prevention Endpoint 11.1.200 / 11.3.0+ Fix from $1,9502019-07-24 MEDIUM 6.5 CVE-2019-3595 Improper Neutralization of Special Elements used in a Command ('Command Injection') in ePO extension in McAfee Data Loss Prevention (DLP) 11.x prior … Data Loss Prevention Endpoint 11.1.200 / 11.3.0+ Fix from $1,6002019-07-24 MEDIUM 6.1 CVE-2019-3591 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in ePO extension in McAfee Data Loss Prevention (DLPe) for Windo… Data Loss Prevention Endpoint 11.1.200 / 11.3.0+ Fix from $1,6002019-07-24 MEDIUM 6.7 CVE-2019-3592 Privilege escalation vulnerability in McAfee Agent (MA) before 5.6.1 HF3, allows local administrator users to potentially disable some McAfee process… Agent after 5.6.1 Fix from $1,6002019-07-18 HIGH 8.8 CVE-2019-3632 Directory Traversal vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to gain e… Enterprise Security Manager 10.4.0 / 11.2.0+ Fix from $1,9502019-06-27 HIGH 7.2 CVE-2019-3630 Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute … Enterprise Security Manager 10.4.0 / 11.2.0+ Fix from $1,9502019-06-27 HIGH 7.2 CVE-2019-3631 Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute … Enterprise Security Manager 10.4.0 / 11.2.0+ Fix from $1,9502019-06-27 MEDIUM 6.5 CVE-2019-3629 Application protection bypass vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows unauthenticated us… Enterprise Security Manager 10.4.0 / 11.2.0+ Fix from $1,6002019-06-27 HIGH 8.8 CVE-2019-3628 Privilege escalation in McAfee Enterprise Security Manager (ESM) 11.x prior to 11.2.0 allows authenticated user to gain access to a core system compo… Enterprise Security Manager 11.2.0+ Fix from $1,9502019-06-27 HIGH 7.5 CVE-2019-3586 Protection Mechanism Failure in the Firewall in McAfee Endpoint Security (ENS) 10.x prior to 10.6.1 May 2019 update allows context-dependent attacker… Endpoint Security after 10.6.1 Fix from $1,9502019-05-15 CRITICAL 9.8 CVE-2019-3597 Authentication Bypass vulnerability in McAfee Network Security Manager (NSM) 9.1 < 9.1.7.75.2 and 9.2 < 9.2.7.31 (9.2 Update 2) allows unauthenticate… Network Security Manager 9.1.7.75 / 9.2.7.31+ Fix from $2,3002019-03-26 MEDIUM 6.8 CVE-2019-3615 Data Leakage Attacks vulnerability in the web interface in McAfee Database Security prior to the 4.6.6 March 2019 update allows local users to expose… Database Security after 4.6.6 Fix from $1,6002019-03-12