Browse CVEs

CRITICAL 9.8 CVE-2017-4053 Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users … Advanced Threat Defense Patch available Fix from $2,3002017-07-12 HIGH 8.8 CVE-2017-4054 Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to… Advanced Threat Defense Patch available Fix from $1,9502017-07-12 HIGH 8.8 CVE-2017-4057 Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticated users… Advanced Threat Defense Patch available Fix from $1,9502017-07-12 HIGH 7.5 CVE-2017-4055 Exploitation of Authentication vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthent… Advanced Threat Defense Patch available Fix from $1,9502017-07-12 MEDIUM 5.4 CVE-2017-3948 Cross Site Scripting (XSS) in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint (DLP Endpoint) 10.0.x allows authenticated users … Data Loss Prevention Endpoint Patch available Fix from $1,6002017-06-23 HIGH 7.2 CVE-2017-3980 A directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, and 5.1.3 and earlier allows remote authe… Epolicy Orchestrator after 5.9.1 Fix from $1,9502017-05-18 HIGH 8.0 CVE-2017-4014 Session Side jacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view, add, … Network Data Loss Prevention after 9.3.0 Fix from $1,9502017-05-17 MEDIUM 6.5 CVE-2017-4012 Privilege Escalation vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view confid… Network Data Loss Prevention after 9.3.0 Fix from $1,6002017-05-17 MEDIUM 6.1 CVE-2017-4011 Embedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to get… Network Data Loss Prevention after 9.3.0 Fix from $1,6002017-05-17 MEDIUM 5.3 CVE-2017-4013 Banner Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to obtain product information via HTTP re… Network Data Loss Prevention after 9.3.0 Fix from $1,6002017-05-17 MEDIUM 5.3 CVE-2017-4016 Web Server method disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to exploit and find another ho… Network Data Loss Prevention after 9.3.0 Fix from $1,6002017-05-17 MEDIUM 5.3 CVE-2017-4017 User Name Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to view user information via the appli… Network Data Loss Prevention after 9.3.0 Fix from $1,6002017-05-17 HIGH 7.3 CVE-2016-8032 Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine (AVE) 5200 through 5800 allows local attackers to bypass local security … Anti Malware Scan Engine Patch available Fix from $1,9502017-03-31 HIGH 7.3 CVE-2016-8031 Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine (AVE) 5200 through 5800 allows local users to bypass local security prot… Anti Malware Scan Engine Patch available Fix from $1,9502017-03-28 CRITICAL 10.0 CVE-2016-8027EPSS 6% SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier allows attac… Epolicy Orchestrator after 5.3.2 Fix from $2,3002017-03-14 HIGH 8.1 CVE-2016-8023EPSS 9% Authentication bypass by assumed-immutable data vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote u… Virusscan Enterprise after 2.0.3 Fix from $1,9502017-03-14 HIGH 8.1 CVE-2016-8024EPSS 9% Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allow… Virusscan Enterprise after 2.0.3 Fix from $1,9502017-03-14 HIGH 7.8 CVE-2016-8026 Arbitrary command execution vulnerability in Intel Security McAfee Security Scan Plus (SSP) 3.11.469 and earlier allows authenticated users to gain e… Security Scan Plus after 3.11.469 Fix from $1,9502017-03-14 HIGH 7.5 CVE-2016-8022EPSS 13% Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthenticated… Virusscan Enterprise after 2.0.3 Fix from $1,9502017-03-14 MEDIUM 6.5 CVE-2017-3899 SQL injection vulnerability in Intel Security Advanced Threat Defense (ATD) Linux 3.6.0 and earlier allows remote authenticated users to obtain produ… Advanced Threat Defense after 3.8.0 Fix from $1,6002017-03-14 MEDIUM 6.2 CVE-2016-8025EPSS 7% SQL injection vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to obtain produ… Virusscan Enterprise after 2.0.3 Fix from $1,6002017-03-14 MEDIUM 5.0 CVE-2016-8021 Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote … Virusscan Enterprise after 2.0.3 Fix from $1,6002017-03-14 CRITICAL 9.8 CVE-2014-9921 Information disclosure vulnerability in McAfee (now Intel Security) Cloud Analysis and Deconstructive Services (CADS) 1.0.0.3x, 1.0.0.4d and earlier … Cloud Analysis And Deconstructive Services after 1.0.0.4d Fix from $2,3002017-03-14 HIGH 8.8 CVE-2015-8988 Unquoted executable path vulnerability in Client Management and Gateway components in McAfee (now Intel Security) ePO Deep Command (eDC) 2.2 and 2.1 … Epo Deep Command Patch available Fix from $1,9502017-03-14 HIGH 8.8 CVE-2015-8989 Unsalted password vulnerability in the Enterprise Manager (web portal) component in Intel Security McAfee Vulnerability Manager (MVM) 7.5.8 and earli… Vulnerability Manager after 7.5.8 Fix from $1,9502017-03-14 HIGH 8.8 CVE-2016-8008 Privilege escalation vulnerability in Windows 7 and Windows 10 in McAfee Security Scan Plus (SSP) 3.11.376 allows attackers to load a replacement of … Security Scan Plus after 3.11.376 Fix from $1,9502017-03-14 HIGH 8.0 CVE-2016-8020EPSS 11% Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authentica… Virusscan Enterprise after 2.0.3 Fix from $1,9502017-03-14 HIGH 7.8 CVE-2016-8009 Privilege escalation vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and 6.x versions allows attackers to cause DoS, unexpected … Application Control No fix yet Fix from $1,9502017-03-14 HIGH 7.8 CVE-2016-8010 Application protections bypass vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and earlier and Endpoint Security (ENS) 10.2 and … Application Control after 10.2 Fix from $1,9502017-03-14 HIGH 7.8 CVE-2016-8012 Access control vulnerability in Intel Security Data Loss Prevention Endpoint (DLPe) 9.4.200 and 9.3.600 allows authenticated users with Read-Write-Ex… Data Loss Prevention Endpoint after 9.4.200 Fix from $1,9502017-03-14