ES
Product
Endpoint Security
37
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 13Medium 24Low 0
Watch
Add Endpoint Security to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-7332 | 8.8 | Nov 12 | Cross Site Request Forgery vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows an attacker to execute… Affected: before 10.6.1 |
| CVE-2020-7319 | 8.8 | Sep 9 | Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to access files which the user… Affected: before 10.7.0 |
| CVE-2020-7265 | 8.4 | May 8 | Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Mac prior to 10.6.9 allows local users to delete files the user would otherwise not have access to via… Affected: 10.5.0 before 10.6.9 |
| CVE-2020-7264 | 8.4 | May 8 | Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 Hotfix 199847 allows local users to delete files the user would otherwise not have… Affected: 10.5.0 before 10.5.5; 10.6.0; 10.7.0 |
| CVE-2021-31843 | 7.8 | Sep 17 | Improper privileges management vulnerability in McAfee Endpoint Security (ENS) Windows prior to 10.7.0 September 2021 Update allows local users to access files which they would… Affected: before 10.7.0; 10.7.0; 10.7.0; 10.7.0; 10.7.0; 10.7.0; +4 more |
| CVE-2020-7331 | 7.8 | Nov 12 | Unquoted service executable path in McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows local users to cause a denial of service and malicious file… Affected: before 10.6.1 |
| CVE-2020-7250 | 7.8 | Apr 15 | Symbolic link manipulation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows authenticated local user to potentially gain an… Affected: 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; 10.5.5; +1 more |
| CVE-2020-7274 | 7.8 | Apr 15 | Privilege escalation vulnerability in McTray.exe in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to spawn unrelated processes… Affected: 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; 10.5.5; +1 more |
| CVE-2020-7259 | 7.8 | Apr 15 | Exploitation of Privilege/Trust vulnerability in file in McAfee Endpoint Security (ENS) Prior to 10.7.0 February 2020 Update allows local users to bypass local security protection… Affected: 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; 10.5.5; +1 more |
| CVE-2019-3582 | 7.8 | Feb 28 | McAfee Endpoint Security updates fix a privilege escalation vulnerability Affected: through 10.6.1 |
| CVE-2016-8010 | 7.8 | Mar 14 | Application protections bypass vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and earlier and Endpoint Security (ENS) 10.2 and earlier allows local users to… Affected: through 10.2 |
| CVE-2019-3586 | 7.5 | May 15 | Protection Mechanism Failure in the Firewall in McAfee Endpoint Security (ENS) 10.x prior to 10.6.1 May 2019 update allows context-dependent attackers to circumvent ENS protection… Affected: 10.0.0 through 10.6.1; 10.6.1 |
| CVE-2020-7320 | 7.3 | Sep 9 | Protection Mechanism Failure vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local administrator to temporarily reduce the… Affected: before 10.7.0 |
| CVE-2020-7323 | 6.9 | Sep 9 | Authentication Protection Bypass vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows physical local users to bypass the… Affected: before 10.7.0 |
| CVE-2020-7276 | 6.7 | Apr 15 | Authentication bypass vulnerability in MfeUpgradeTool in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows administrator users to access policy… Affected: 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; 10.5.5; +1 more |
| CVE-2020-7263 | 6.7 | Apr 1 | Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security (ENS) for Windows all current versions allows local administrator to alter ENS configuration… Affected: 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; 10.5.5; +3 more |
| CVE-2020-7308 | 6.5 | Apr 15 | Cleartext Transmission of Sensitive Information between McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update and McAfee Global Threat Intelligence (GTI)… Affected: through 10.6.1; 10.6.1; 10.6.1; 10.6.1; 10.6.1; 10.6.1; +12 more |
| CVE-2020-7278 | 6.5 | Apr 15 | Exploiting incorrectly configured access control security levels vulnerability in ENS Firewall in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 and 10.6.1… Affected: 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; 10.5.5; +1 more |
| CVE-2020-7257 | 6.3 | Apr 15 | Privilege escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows local users to cause the deletion and creation of… Affected: 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; 10.5.5; +1 more |
| CVE-2021-31842 | 5.5 | Sep 17 | XML Entity Expansion injection vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2021 Update allows a local user to initiate high CPU and… Affected: before 10.7.0; 10.7.0; 10.7.0; 10.7.0; 10.7.0; 10.7.0; +3 more |
| CVE-2020-7273 | 5.5 | Apr 15 | Accessing functionality not properly constrained by ACLs vulnerability in the autorun start-up protection in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020… Affected: 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; 10.5.5; +1 more |
| CVE-2020-7261 | 5.5 | Apr 15 | Buffer Overflow via Environment Variables vulnerability in AMSI component in McAfee Endpoint Security (ENS) Prior to 10.7.0 February 2020 Update allows local users to disable… Affected: 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; 10.5.5; +1 more |
| CVE-2020-7251 | 5.5 | Feb 14 | Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 February 2020 Update allows local users to disable security… Affected: before 10.6.1 |
| CVE-2019-3653 | 5.5 | Oct 9 | Improper access control vulnerability in Configuration tool in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to gain access to security… Affected: 10.5.0 through 10.5.5; 10.6.0 before 10.6.1; 10.16.1 |
| CVE-2020-7277 | 5.3 | Apr 15 | Protection mechanism failure in all processes in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows local users to stop certain McAfee ENS… Affected: 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; 10.5.5; +1 more |
| CVE-2020-7275 | 5.3 | Apr 15 | Accessing, modifying or executing executable files vulnerability in the uninstaller in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local… Affected: 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; 10.5.5; +1 more |
| CVE-2019-3652 | 5.3 | Oct 9 | Code Injection vulnerability in EPSetup.exe in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to get their malicious code installed by the… Affected: 10.5.0 through 10.5.5; 10.6.0 before 10.6.1; 10.6.1 |
| CVE-2016-3984 | 5.1 | Apr 8 | The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161, Agent (MA) 5.x before 5.0.2 Hotfix 1110392 (5.0.2.333), Data Exchange Layer 2.x (DXL)… Affected: through 10.0.1 |
| CVE-2021-23878 | 5.0 | Feb 10 | Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows a local user to view… Affected: before 10.7.0 |
| CVE-2021-23881 | 4.8 | Feb 10 | A stored cross site scripting vulnerability in ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 February 2021 Update allows an ENS ePO administrator to add a script… Affected: before 10.7.0 |
| CVE-2020-7333 | 4.8 | Nov 12 | Cross site scripting vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows administrators to inject arbitrary… Affected: before 10.7.0 |
| CVE-2020-7322 | 4.7 | Sep 9 | Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information… Affected: before 10.7.0 |
| CVE-2021-23883 | 4.4 | Feb 10 | A Null Pointer Dereference vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows a local administrator to cause Windows to crash… Affected: before 10.7.0 |
| CVE-2021-23882 | 4.4 | Feb 10 | Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows local administrators to prevent the installation of… Affected: before 10.7.0 |
| CVE-2021-23880 | 4.4 | Feb 10 | Improper Access Control in attribute in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrator user to perform an… Affected: before 10.7.0 |
| CVE-2020-7255 | 4.4 | Apr 15 | Privilege escalation vulnerability in the administrative user interface in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows local users to… Affected: 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; 10.5.5; +1 more |
| CVE-2017-4028 | 4.4 | Apr 3 | Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into… Affected: 10.2 |
Showing 37