AT
Product
Advanced Threat Defense
26
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 12Medium 9Low 0
Watch
Add Advanced Threat Defense to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-4053 | 9.8 | Jul 12 | Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to execute… Affected: 3.4; 3.6; 3.8; 3.10 |
| CVE-2017-4052 | 9.8 | Jul 12 | Authentication Bypass vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to… Affected: 3.4; 3.6; 3.8; 3.10 |
| CVE-2019-3661 | 8.8 | Nov 14 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to… Affected: before 4.8 |
| CVE-2019-3660 | 8.8 | Nov 13 | Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute commands on the server remotely via… Affected: before 4.8 |
| CVE-2019-3651 | 8.8 | Nov 13 | Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to ePO as an administrator via using… Affected: before 4.8 |
| CVE-2017-4057 | 8.8 | Jul 12 | Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to gain elevated privileges… Affected: 3.4; 3.6; 3.8; 3.10 |
| CVE-2017-4054 | 8.8 | Jul 12 | Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to execute a command of their… Affected: 3.4; 3.6; 3.8; 3.10 |
| CVE-2020-7254 | 7.8 | Mar 12 | Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to execute arbitrary code via… Affected: 4.0 before 4.8.2 |
| CVE-2019-3663 | 7.8 | Nov 14 | Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows local attacker to gain access to the root password via accessing… Affected: before 4.8 |
| CVE-2019-3644 | 7.5 | Sep 11 | McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service Affected: 4.0; 4.2; 4.4; 4.6 |
| CVE-2019-3643 | 7.5 | Sep 11 | McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, potentially leading to a denial of service Affected: 4.0; 4.2; 4.4; 4.6 |
| CVE-2017-4055 | 7.5 | Jul 12 | Exploitation of Authentication vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote… Affected: 3.4; 3.6; 3.8; 3.10 |
| CVE-2015-8990 | 7.5 | Mar 14 | Detection bypass vulnerability in Intel Security Advanced Threat Defense (ATD) 3.4.6 and earlier allows malware samples to bypass ATD detection via renaming the malware Affected: through 3.4.6 |
| CVE-2016-3983 | 7.5 | Apr 8 | McAfee Advanced Threat Defense (ATD) before 3.4.8.178 might allow remote attackers to bypass malware detection by leveraging information about the parent process Affected: through 3.4.4.142 |
| CVE-2023-0978 | 6.7 | Mar 13 | A command injection vulnerability in Trellix Intelligent Sandbox CLI for version 5.2 and earlier, allows a local user to inject and execute arbitrary operating system commands… Affected: 4.0 through 4.14.2 |
| CVE-2019-3662 | 6.5 | Nov 14 | Path Traversal: '/absolute/pathname/here' vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to gain unintended access to… Affected: before 4.8 |
| CVE-2019-3650 | 6.5 | Nov 13 | Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to the atduser credentials via… Affected: before 4.8 |
| CVE-2019-3649 | 6.5 | Nov 13 | Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attackers to gain access to hashed credentials via carefully… Affected: before 4.8 |
| CVE-2017-3899 | 6.5 | Mar 14 | SQL injection vulnerability in Intel Security Advanced Threat Defense (ATD) Linux 3.6.0 and earlier allows remote authenticated users to obtain product information via a crafted… Affected: through 3.8.0 |
| CVE-2020-7262 | 5.5 | Jun 22 | Improper Access Control vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.10.0 allows local users to view sensitive files via a carefully crafted HTTP request… Affected: before 4.10.0 |
| CVE-2015-8986 | 5.5 | Mar 14 | Sandbox detection evasion vulnerability in hardware appliances in McAfee (now Intel Security) Advanced Threat Defense (MATD) 3.4.2.32 and earlier allows attackers to detect the… Affected: through 3.4.2.32 |
| CVE-2020-7270 | 4.3 | Apr 15 | Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted… Affected: before 4.12.2 |
| CVE-2020-7269 | 4.3 | Apr 15 | Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted… Affected: before 4.12.2 |
| CVE-2015-3030 | – | Apr 8 | The web interface in McAfee Advanced Threat Defense (MATD) before 3.4.4.63 allows remote authenticated users to obtain sensitive configuration information via unspecified vectors Affected: through 3.4.4.14 |
| CVE-2015-3029 | – | Apr 8 | The web interface in McAfee Advanced Threat Defense (MATD) before 3.4.4.63 does not properly restrict access, which allows remote authenticated users to obtain sensitive… Affected: through 3.4.4.14 |
| CVE-2015-3028 | – | Apr 8 | McAfee Advanced Threat Defense (MATD) before 3.4.4.63 allows remote authenticated users to bypass intended restrictions and change or update configuration settings via crafted… Affected: through 3.4.4.14 |
Showing 26