VE
Product
Virusscan Enterprise
29
CVEs
0
On KEV
8.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 9Low 3
Watch
Add Virusscan Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-7267 | 8.4 | May 8 | Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Linux prior to 2.0.3 Hotfix 2635000 allows local users to delete files the user would otherwise not… Affected: 8.8; 8.8; 8.8; 8.8; 8.8; 8.8; +8 more |
| CVE-2020-7266 | 8.4 | May 8 | Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Windows prior to 8.8 Patch 14 Hotfix 116778 allows local users to delete files the user would otherwise… Affected: 1.9.0 before 1.9.2; 2.0.0 before 2.0.3 |
| CVE-2016-8024 | 8.1 | Mar 14 | Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthenticated… Affected: through 2.0.3 |
| CVE-2016-8023 | 8.1 | Mar 14 | Authentication bypass by assumed-immutable data vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthenticated attacker to… Affected: through 2.0.3 |
| CVE-2016-8020 | 8.0 | Mar 14 | Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to execute arbitrary… Affected: through 2.0.3 |
| CVE-2020-7280 | 7.8 | Jun 10 | Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise (VSE) prior to 8.8 Patch 15 allows local users to cause the deletion and… Affected: 8.8; 8.8; 8.8; 8.8; 8.8; 8.8; +9 more |
| CVE-2019-3585 | 7.8 | Jun 10 | Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow local users to interact with the… Affected: 8.8; 8.8; 8.8; 8.8; 8.8; 8.8; +8 more |
| CVE-2016-8022 | 7.5 | Mar 14 | Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthenticated attacker to execute arbitrary… Affected: through 2.0.3 |
| CVE-2019-3588 | 6.8 | Jun 10 | Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow unauthorized users to interact… Affected: 8.8; 8.8; 8.8; 8.8; 8.8; 8.8; +8 more |
| CVE-2020-7337 | 6.7 | Dec 9 | Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise (VSE) prior to 8.8 Patch 16 allows local administrators to bypass local security… Affected: before 8.8; 8.8; 8.8; 8.8; 8.8; 8.8; +11 more |
| CVE-2016-8025 | 6.2 | Mar 14 | SQL injection vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to obtain product information via a crafted… Affected: through 2.0.3 |
| CVE-2016-8019 | 6.1 | Mar 14 | Cross-site scripting (XSS) vulnerability in attributes in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows unauthenticated remote attackers to inject… Affected: through 2.0.3 |
| CVE-2016-3984 | 5.1 | Apr 8 | The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161, Agent (MA) 5.x before 5.0.2 Hotfix 1110392 (5.0.2.333), Data Exchange Layer 2.x (DXL)… Affected: through 8.8.0 |
| CVE-2016-8021 | 5.0 | Mar 14 | Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to spoof… Affected: through 2.0.3 |
| CVE-2016-8030 | 4.3 | Apr 25 | A memory corruption vulnerability in Scriptscan COM Object in McAfee VirusScan Enterprise 8.8 Patch 8 and earlier allows remote attackers to create a Denial of Service on the… Affected: through 8.8.0 |
| CVE-2016-8018 | 4.3 | Mar 14 | Cross-site request forgery (CSRF) vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote attackers to execute… Affected: through 2.0.3 |
| CVE-2016-8017 | 4.1 | Mar 14 | Special element injection vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote attackers to read files on the… Affected: through 2.0.3 |
| CVE-2018-6674 | 3.9 | May 25 | Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13 allows local users to spawn unrelated… Affected: 8.8.0 |
| CVE-2016-8016 | 3.4 | Mar 14 | Information exposure in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote attackers to obtain the existence of unauthorized files on… Affected: through 2.0.3 |
| CVE-2016-4534 | 3.0 | May 5 | The McAfee VirusScan Console (mcconsol.exe) in McAfee VirusScan Enterprise 8.8.0 before Hotfix 1123565 (8.8.0.1546) on Windows allows local administrators to bypass intended… Affected: 8.8.0 |
| CVE-2015-8577 | – | Dec 16 | The Buffer Overflow Protection (BOP) feature in McAfee VirusScan Enterprise before 8.8 Patch 6 allocates memory with Read, Write, Execute (RWX) permissions at predictable… Affected: through 8.8.0 |
| CVE-2010-5143 | – | Aug 22 | McAfee VirusScan Enterprise before 8.8 allows local users to disable the product by leveraging administrative privileges to execute an unspecified Metasploit Framework module Affected: through 8.7.0; 8.0i; 8.0i; 8.5i; 8.6.0; 8.7.00003; +2 more |
| CVE-2010-3496 | – | Aug 22 | McAfee VirusScan Enterprise 8.5i and 8.7i does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote… Affected: 8.5i; 8.7i |
| CVE-2009-5118 | – | Aug 22 | Untrusted search path vulnerability in McAfee VirusScan Enterprise before 8.7i allows local users to gain privileges via a Trojan horse DLL in an unspecified directory, as… Affected: through 8.5i; 8.0i; 8.0i |
| CVE-2009-1348 | – | Apr 30 | The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for… Affected: All versions, or not specified |
| CVE-2007-2152 | – | Apr 19 | Buffer overflow in the On-Access Scanner in McAfee VirusScan Enterprise before 8.0i Patch 12 allows user-assisted remote attackers to execute arbitrary code via a long filename… Affected: through 8.0i |
| CVE-2007-1538 | – | Mar 20 | McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in… Affected: 8.5i |
| CVE-2006-4886 | – | Sep 19 | The VirusScan On-Access Scan component in McAfee VirusScan Enterprise 7.1.0 and Scan Engine 4.4.00 allows local privileged users to bypass security restrictions and disable the… Affected: 7.1.0 |
| CVE-2005-4505 | – | Dec 23 | Unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5) might allow local users to gain privileges via a malicious… Affected: 8.0i |
Showing 29