AG
Product
Agent
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 13Medium 8Low 1
Watch
Add Agent to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-6703 | 9.8 | Dec 11 | Use After Free in Remote logging (which is disabled by default) in McAfee McAfee Agent (MA) 5.x prior to 5.6.0 allows remote unauthenticated attackers to cause a Denial of Service… Affected: 5.0.0 before 5.6.0 |
| CVE-2021-1257 | 8.8 | Jan 20 | A vulnerability in the web-based management interface of Cisco DNA Center Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF)… Affected: before 5.7.6; before 5.7.6; before 5.7.6 |
| CVE-2022-1256 | 7.8 | Apr 14 | A local privilege escalation vulnerability in MA for Windows prior to 5.7.6 allows a local low privileged user to gain system privileges through running the repair functionality Affected: before 5.7.6 |
| CVE-2022-0166 | 7.8 | Jan 19 | A privilege escalation vulnerability in the McAfee Agent prior to 5.7.5 Affected: before 5.7.5 |
| CVE-2021-31854 | 7.8 | Jan 19 | A command Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.7.5 allows local users to inject arbitrary shell code into the file cleanup.exe Affected: before 5.7.5 |
| CVE-2021-31847 | 7.8 | Sep 22 | Improper access control vulnerability in the repair process for McAfee Agent for Windows prior to 5.7.4 could allow a local attacker to perform a DLL preloading attack using… Affected: before 5.7.4 |
| CVE-2018-6705 | 7.8 | Dec 12 | Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command execution via specific… Affected: 5.0.0 through 5.0.6; 5.5.0; 5.5.1 |
| CVE-2018-6704 | 7.8 | Dec 12 | Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command execution via specific… Affected: 5.0.0 through 5.0.6; 5.5.0; 5.5.1 |
| CVE-2019-3599 | 7.5 | Feb 28 | McAfee Agent update fixes an Information Disclosure vulnerability Affected: 5.0.0 through 5.0.6; 5.5.0 through 5.5.2; 5.6.0 |
| CVE-2018-6706 | 7.5 | Dec 12 | Insecure handling of temporary files in non-Windows McAfee Agent 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows an Unprivileged User to introduce custom paths during agent… Affected: 5.0.0 through 5.0.6; 5.5.0; 5.5.1 |
| CVE-2022-2313 | 7.3 | Jul 27 | A DLL hijacking vulnerability in the MA Smart Installer for Windows prior to 5.7.7, which allows local users to execute arbitrary code and obtain higher privileges via careful… Affected: before 5.7.7 |
| CVE-2019-3613 | 7.3 | Jun 10 | DLL Search Order Hijacking vulnerability in McAfee Agent (MA) prior to 5.6.4 allows attackers with local access to execute arbitrary code via execution from a compromised folder Affected: 5.0.0 before 5.0.6; 5.5.0 before 5.5.4; 5.6.0 before 5.6.4 |
| CVE-2022-1258 | 7.2 | Apr 14 | A blind SQL injection vulnerability in the ePolicy Orchestrator (ePO) extension of MA prior to 5.7.6 can be exploited by an authenticated administrator on ePO to perform arbitrary… Affected: before 5.7.6 |
| CVE-2018-6707 | 7.0 | Dec 14 | Denial of Service through Resource Depletion vulnerability in the agent in non-Windows McAfee Agent (MA) 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to cause DoS,… Affected: 5.0.0 through 5.0.6; 5.5.0; 5.5.1 |
| CVE-2019-3592 | 6.7 | Jul 18 | Privilege escalation vulnerability in McAfee Agent (MA) before 5.6.1 HF3, allows local administrator users to potentially disable some McAfee processes by manipulating the MA… Affected: 5.0.0 through 5.6.1 |
| CVE-2019-1559 | 5.9 | Feb 27 | 0-byte record padding oracle Affected: 5.6.0 through 5.6.4 |
| CVE-2022-1257 | 5.5 | Apr 14 | Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a local user to gain access to sensitive information through… Affected: before 5.7.6 |
| CVE-2020-7343 | 5.5 | Jan 18 | Missing Authorization vulnerability in McAfee Agent (MA) for Windows prior to 5.7.1 allows local users to block McAfee product updates by manipulating a directory used by MA for… Affected: before 5.7.1 |
| CVE-2019-3598 | 5.3 | Feb 28 | McAfee Agent update fixes a vulnerability in handling UDP requests Affected: 5.0.0 through 5.0.6; 5.5.0 through 5.5.2; 5.6.0 |
| CVE-2015-8987 | 5.3 | Mar 14 | Man-in-the-middle (MitM) attack vulnerability in non-Mac OS agents in McAfee (now Intel Security) Agent (MA) 4.8.0 patch 2 and earlier allows attackers to make a McAfee Agent talk… Affected: through 4.8.0 |
| CVE-2016-3984 | 5.1 | Apr 8 | The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161, Agent (MA) 5.x before 5.0.2 Hotfix 1110392 (5.0.2.333), Data Exchange Layer 2.x (DXL)… Affected: through 5.0.2.285 |
| CVE-2020-7253 | 4.4 | Mar 12 | Improper access control vulnerability in masvc.exe in McAfee Agent (MA) prior to 5.6.4 allows local users with administrator privileges to disable self-protection via a McAfee… Affected: 5.5.0 before 5.5.4; 5.6.0 before 5.6.4 |
| CVE-2021-31839 | 3.3 | Jun 10 | Improper privilege management vulnerability in McAfee Agent for Windows prior to 5.7.3 allows a local user to modify event information in the MA event folder Affected: 5.0.0 before 5.7.3 |
| CVE-2013-3627 | – | Oct 5 | FrameworkService.exe in McAfee Framework Service in McAfee Managed Agent (MA) before 4.5.0.1927 and 4.6 before 4.6.0.3258 allows remote attackers to cause a denial of service… Affected: 4.5.0 before 4.5.0.1927; 4.6.0 before 4.6.0.3258 |
| CVE-2008-1357 | – | Mar 17 | Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (Patch 3) and earlier, as used in ePolicy Orchestrator 4.0.0… Affected: 4.0 |
Showing 25