ES
Product
Enterprise Security Manager
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 1Low 0
Watch
Add Enterprise Security Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-3632 | 8.8 | Jun 27 | Directory Traversal vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to gain elevated privileges via… Affected: before 10.4.0; 11.0.0 before 11.2.0 |
| CVE-2019-3628 | 8.8 | Jun 27 | Privilege escalation in McAfee Enterprise Security Manager (ESM) 11.x prior to 11.2.0 allows authenticated user to gain access to a core system component via incorrect access… Affected: 11.0.0 before 11.2.0 |
| CVE-2019-3644 | 7.5 | Sep 11 | McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service Affected: 10.2.0; 10.3.4; 10.4.0; 11.0.0; 11.1.0; 11.1.1; +3 more |
| CVE-2019-3643 | 7.5 | Sep 11 | McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, potentially leading to a denial of service Affected: 10.2.0; 10.3.4; 10.4.0; 11.0.0; 11.1.0; 11.1.1; +3 more |
| CVE-2015-7704 | 7.5 | Aug 7 | The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages Affected: before 10.4.0; 11.0.0 before 11.2.0 |
| CVE-2019-3631 | 7.2 | Jun 27 | Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary code via specially… Affected: before 10.4.0; 11.0.0 before 11.2.0 |
| CVE-2019-3630 | 7.2 | Jun 27 | Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary code via specially… Affected: before 10.4.0; 11.0.0 before 11.2.0 |
| CVE-2019-3629 | 6.5 | Jun 27 | Application protection bypass vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows unauthenticated user to impersonate system users… Affected: before 10.4.0; 11.0.0 before 11.2.0 |
| CVE-2015-7310 | – | Sep 22 | McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enterprise Security Manager/Receiver (ESMREC) before 9.3.2MR18, 9.4.x before… Affected: through 9.3.2; through 9.4.2; through 9.5.0 |
Showing 9