MC
Vendor
Mcafee
712
CVEs
3
On KEV
0
New 30D
Products
WG9.8
Web Gateway
Mcafee
41 CVEs1 on KEV0 new
TP8.8
Total Protection
Mcafee
26 CVEs1 on KEV0 new
MT7.8
McAfee Total Protection (MTP)
McAfee
1 CVEs1 on KEV0 new
EO10.0
Epolicy Orchestrator
Mcafee
86 CVEs0 on KEV0 new
ES8.8
Endpoint Security
Mcafee
37 CVEs0 on KEV0 new
ND9.1
Network Data Loss Prevention
Mcafee
31 CVEs0 on KEV0 new
VE8.4
Virusscan Enterprise
Mcafee
29 CVEs0 on KEV0 new
AT9.8
Advanced Threat Defense
Mcafee
26 CVEs0 on KEV0 new
DL8.8
Data Loss Prevention Endpoint
Mcafee
26 CVEs0 on KEV0 new
AG9.8
Agent
Mcafee
25 CVEs0 on KEV0 new
EG6.5
Email Gateway
Mcafee
20 CVEs0 on KEV0 new
NS9.8
Network Security Manager
Mcafee
19 CVEs0 on KEV0 new
GA–
Gateway
Mcafee
13 CVEs0 on KEV0 new
DL7.8
Data Loss Prevention
Mcafee
12 CVEs0 on KEV0 new
SE–
Scan Engine
Mcafee
12 CVEs0 on KEV0 new
EA–
Email And Web Security
Mcafee
10 CVEs0 on KEV0 new
MA7.8
Mcafee Agent
Mcafee
10 CVEs0 on KEV0 new
VI–
Virusscan
Mcafee
10 CVEs0 on KEV0 new
AE–
Antivirus Engine
Mcafee
9 CVEs0 on KEV0 new
ES8.8
Enterprise Security Manager
Mcafee
9 CVEs0 on KEV0 new
PA9.8
Policy Auditor
Mcafee
9 CVEs0 on KEV0 new
DS8.8
Database Security
Mcafee
8 CVEs0 on KEV0 new
TK7.8
True Key
Mcafee
8 CVEs0 on KEV0 new
AR7.8
Active Response
Mcafee
7 CVEs0 on KEV0 new
AC7.8
Application Control
Mcafee
7 CVEs0 on KEV0 new
SS9.8
Security Scan Plus
Mcafee
7 CVEs0 on KEV0 new
AA8.2
Application And Change Control
Mcafee
6 CVEs0 on KEV0 new
ES–
E-business Server
Mcafee
6 CVEs0 on KEV0 new
EM–
Enterprise Mobility Manager
Mcafee
6 CVEs0 on KEV0 new
ME7.8
MVision Endpoint
Mcafee
6 CVEs0 on KEV0 new
PR–
Protectionpilot
Mcafee
6 CVEs0 on KEV0 new
TI6.5
Threat Intelligence Exchange Server
Mcafee
6 CVEs0 on KEV0 new
VM8.8
Vulnerability Manager
Mcafee
6 CVEs0 on KEV0 new
CM–
Common Management Agent
Mcafee
5 CVEs0 on KEV0 new
DE5.9
Data Exchange Layer
Mcafee
5 CVEs0 on KEV0 new
IS–
Internet Security Suite
Mcafee
5 CVEs0 on KEV0 new
MW9.8
Mcafee Web Gateway
Mcafee
4 CVEs0 on KEV0 new
AC8.0
Application Change Control
Mcafee
3 CVEs0 on KEV0 new
CC5.5
Change Control
Mcafee
3 CVEs0 on KEV0 new
CA7.0
Cloud AV
Mcafee
3 CVEs0 on KEV0 new
DE7.8
Drive Encryption
Mcafee
3 CVEs0 on KEV0 new
ED7.8
Endpoint Detection And Response
Mcafee
3 CVEs0 on KEV0 new
EO–
Epolicy Orchestrator Agent
Mcafee
3 CVEs0 on KEV0 new
FA7.8
File And Removable Media Protection
Mcafee
3 CVEs0 on KEV0 new
HI7.8
Host Intrusion Prevention
Mcafee
3 CVEs0 on KEV0 new
IS–
Intrushield Security Management System
Mcafee
3 CVEs0 on KEV0 new
LI9.8
Livesafe
Mcafee
3 CVEs0 on KEV0 new
SE–
Saas Endpoint Protection
Mcafee
3 CVEs0 on KEV0 new
SW7.0
Security Webadvisor
Mcafee
3 CVEs0 on KEV0 new
VI–
Virex
Mcafee
3 CVEs0 on KEV0 new
WE7.3
Webadvisor
Mcafee
3 CVEs0 on KEV0 new
AS7.3
Anti-malware Scan Engine
Mcafee
2 CVEs0 on KEV0 new
AP6.7
Anti-virus Plus
Mcafee
2 CVEs0 on KEV0 new
AM–
Asset Manager
Mcafee
2 CVEs0 on KEV0 new
CS–
Cloud Single Sign ON
Mcafee
2 CVEs0 on KEV0 new
CM–
Cma
Mcafee
2 CVEs0 on KEV0 new
CP8.2
Consumer Product Removal Tool
Mcafee
2 CVEs0 on KEV0 new
ES7.0
Endpoint Security For Linux Threat Prevention
Mcafee
2 CVEs0 on KEV0 new
EM–
Enterprise Mobility Manager Agent
Mcafee
2 CVEs0 on KEV0 new
ED8.8
Epo Deep Command
Mcafee
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2016-20050 | NE Netschedscan Mcafee | 5.5 | Apr 4 | NetSchedScan 1.0 Buffer Overflow Denial of Service |
| CVE-2024-25254 | SU Superscan Mcafee | 9.8 | Nov 11 | SuperScan v4.1 was discovered to contain a buffer overflow via the Hostname/IP parameter |
| CVE-2023-5445 | EO Epolicy Orchestrator Mcafee | 5.4 | Nov 17 | An open redirect vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2, allows a remote low privileged user to modify the URL parameter for the purpose of redirecting… |
| CVE-2023-5444 | EO Epolicy Orchestrator Mcafee | 8.0 | Nov 17 | A Cross Site Request Forgery vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2 allows a remote low privilege user to successfully add a new user with… |
| CVE-2023-40352 | SC Safe Connect Mcafee | 7.2 | Aug 21 | McAfee Safe Connect before 2.16.1.126 may allow an adversary with system privileges to achieve privilege escalation by loading arbitrary DLLs |
| CVE-2023-3946 | EO Epolicy Orchestrator Mcafee | 6.1 | Jul 26 | A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 SP1 Update 1allows a remote unauthenticated attacker to potentially obtain access to an ePO… |
| CVE-2023-25134 | TP Total Protection Mcafee | 6.7 | Mar 21 | McAfee Total Protection prior to 16.0.50 may allow an adversary (with full administrative access) to modify a McAfee specific Component Object Model (COM) in the Windows Registry |
| CVE-2023-0978 | AT Advanced Threat Defense Mcafee | 6.7 | Mar 13 | A command injection vulnerability in Trellix Intelligent Sandbox CLI for version 5.2 and earlier, allows a local user to inject and execute arbitrary operating system commands… |
| CVE-2023-24579 | TP Total Protection Mcafee | 5.5 | Mar 13 | McAfee Total Protection prior to 16.0.51 allows attackers to trick a victim into uninstalling the application via the command prompt |
| CVE-2023-24578 | TP Total Protection Mcafee | 5.5 | Mar 13 | McAfee Total Protection prior to 16.0.49 allows attackers to elevate user privileges due to DLL sideloading |
| CVE-2023-24577 | TP Total Protection Mcafee | 5.5 | Mar 13 | McAfee Total Protection prior to 16.0.50 allows attackers to elevate user privileges due to Improper Link Resolution via registry keys |
| CVE-2023-0221 | AA Application And Change Control Mcafee | 4.4 | Jan 13 | Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with administrator privileges to bypass the execution controls provided by… |
| CVE-2022-43751 | TP Total Protection Mcafee | 7.8 | Nov 23 | McAfee Total Protection prior to version 16.0.49 contains an uncontrolled search path element vulnerability due to the use of a variable pointing to a subdirectory that may be… |
| CVE-2022-2188 | DE Data Exchange Layer Mcafee | 5.5 | Nov 7 | Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory controls in the logs… |
| CVE-2022-3338 | EO Epolicy Orchestrator Mcafee | 5.4 | Oct 18 | XXE in Trellix ePO server |
| CVE-2022-3339 | EO Epolicy Orchestrator Mcafee | 6.1 | Oct 18 | Reflected XSS in Trellix ePO server |
| CVE-2022-2330 | DL Data Loss Prevention Endpoint Mcafee | 6.5 | Aug 30 | Improper Restriction of XML External Entity Reference vulnerability in DLP Endpoint for Windows prior to 11.9.100 allows a remote attacker to cause the DLP Agent to access a local… |
| CVE-2022-37025 | SS Security Scan Plus Mcafee | 7.8 | Aug 18 | An improper privilege management vulnerability in McAfee Security Scan Plus (MSS+) before 4.1.262.1 could allow a local user to modify a configuration file and perform a LOLBin… |
| CVE-2022-2313 | AG Agent Mcafee | 7.3 | Jul 27 | A DLL hijacking vulnerability in the MA Smart Installer for Windows prior to 5.7.7, which allows local users to execute arbitrary code and obtain higher privileges via careful… |
| CVE-2022-1824 | CP Consumer Product Removal Tool Mcafee | 8.2 | Jun 20 | An uncontrolled search path vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allow a local attacker to perform a sideloading attack by using a… |
| CVE-2022-1823 | CP Consumer Product Removal Tool Mcafee | 7.8 | Jun 20 | Improper privilege management vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allow a local user to modify a configuration file and perform a… |
| CVE-2022-1254 | WG Web Gateway Mcafee | 6.1 | Apr 20 | A URL redirection vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.9, 9.x prior to 9.2.20, 8.x prior to 8.2.27, and 7.x prior to 7.8.2.31, and controlled release… |
| CVE-2022-1258 | AG Agent Mcafee | 7.2 | Apr 14 | A blind SQL injection vulnerability in the ePolicy Orchestrator (ePO) extension of MA prior to 5.7.6 can be exploited by an authenticated administrator on ePO to perform arbitrary… |
| CVE-2022-1257 | AG Agent Mcafee | 5.5 | Apr 14 | Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a local user to gain access to sensitive information through… |
| CVE-2022-1256 | AG Agent Mcafee | 7.8 | Apr 14 | A local privilege escalation vulnerability in MA for Windows prior to 5.7.6 allows a local low privileged user to gain system privileges through running the repair functionality |
| CVE-2022-0862 | EO Epolicy Orchestrator Mcafee | 5.3 | Mar 23 | A lack of password change protection vulnerability in a depreciated API of McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote attacker to change… |
| CVE-2022-0861 | EO Epolicy Orchestrator Mcafee | 3.8 | Mar 23 | A XML Extended entity vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote administrator attacker to upload a malicious XML file… |
| CVE-2022-0859 | EO Epolicy Orchestrator Mcafee | 6.7 | Mar 23 | McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a local attacker to point an ePO server to an arbitrary SQL server during the restoration of the ePO… |
| CVE-2022-0858 | EO Epolicy Orchestrator Mcafee | 4.7 | Mar 23 | A cross-site scripting (XSS) vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote attacker to potentially obtain access to an ePO… |
| CVE-2022-0857 | EO Epolicy Orchestrator Mcafee | 6.1 | Mar 23 | A reflected cross-site scripting (XSS) vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote attacker to potentially obtain access… |
| CVE-2022-0842 | EO Epolicy Orchestrator Mcafee | 4.9 | Mar 23 | A blind SQL injection vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote authenticated attacker to potentially obtain… |
| CVE-2022-0815 | WE Webadvisor Mcafee | 7.3 | Mar 10 | Improper access control vulnerability in McAfee WebAdvisor Chrome and Edge browser extensions up to 8.1.0.1895 allows a remote attacker to gain access to McAfee WebAdvisor… |
| CVE-2021-4088 | DL Data Loss Prevention Mcafee | 7.2 | Jan 24 | SQL injection vulnerability in Data Loss Protection (DLP) ePO extension 11.8.x prior to 11.8.100, 11.7.x prior to 11.7.101, and 11.6.401 allows a remote authenticated attacker to… |
| CVE-2022-0166 | AG Agent Mcafee | 7.8 | Jan 19 | A privilege escalation vulnerability in the McAfee Agent prior to 5.7.5 |
| CVE-2021-31854 | AG Agent Mcafee | 7.8 | Jan 19 | A command Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.7.5 allows local users to inject arbitrary shell code into the file cleanup.exe |
| CVE-2022-0129 | TE Techcheck Mcafee | 6.7 | Jan 11 | Uncontrolled search path element vulnerability in McAfee TechCheck prior to 4.0.0.2 allows a local administrator to load their own Dynamic Link Library (DLL) gaining elevation of… |
| CVE-2021-31833 | AA Application And Change Control Mcafee | 7.8 | Jan 4 | Potential product security bypass vulnerability in McAfee Application and Change Control (MACC) prior to version 8.3.4 allows a locally logged in attacker to circumvent the… |
| CVE-2021-4038 | NS Network Security Manager Mcafee | 4.8 | Dec 9 | Cross Site Scripting (XSS) vulnerability in McAfee Network Security Manager (NSM) prior to 10.1 Minor 7 allows a remote authenticated administrator to embed a XSS in the… |
| CVE-2021-31850 | DS Database Security Mcafee | 6.1 | Dec 8 | A denial-of-service vulnerability in Database Security (DBS) prior to 4.8.4 allows a remote authenticated administrator to trigger a denial-of-service attack against the DBS… |
| CVE-2021-31852 | PA Policy Auditor Mcafee | 6.1 | Nov 23 | A Reflected Cross-Site Scripting vulnerability in McAfee Policy Auditor prior to 6.5.2 allows a remote unauthenticated attacker to inject arbitrary web script or HTML via the UID… |
| CVE-2021-31851 | PA Policy Auditor Mcafee | 6.1 | Nov 23 | A Reflected Cross-Site Scripting vulnerability in McAfee Policy Auditor prior to 6.5.2 allows a remote unauthenticated attacker to inject arbitrary web script or HTML via the… |
| CVE-2021-31853 | DE Drive Encryption Mcafee | 7.8 | Nov 10 | DLL Search Order Hijacking Vulnerability in McAfee Drive Encryption (MDE) prior to 7.3.0 HF2 (7.3.0.183) allows local users to execute arbitrary code and escalate privileges via… |
| CVE-2021-31849 | DL Data Loss Prevention Endpoint Mcafee | 7.2 | Nov 1 | SQL injection vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an administrator to inject arbitrary… |
| CVE-2021-31848 | DL Data Loss Prevention Endpoint Mcafee | 6.1 | Nov 1 | Cross site scripting (XSS) vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker to highjack an active DLP ePO administrator… |
| CVE-2021-23877 | TP Total Protection Mcafee | 7.8 | Oct 26 | Privilege escalation vulnerability in the Windows trial installer of McAfee Total Protection (MTP) prior to 16.0.34_x may allow a local user to run arbitrary code as the admin… |
| CVE-2021-31835 | EO Epolicy Orchestrator Mcafee | 4.8 | Oct 22 | Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 11 allows ePO administrators to inject arbitrary web script or HTML via a specific… |
| CVE-2021-31834 | EO Epolicy Orchestrator Mcafee | 5.4 | Oct 22 | Stored Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 11 allows ePO administrators to inject arbitrary web script or HTML via… |
| CVE-2021-23893 | DE Drive Encryption Mcafee | 7.8 | Oct 1 | Privilege Escalation vulnerability in a Windows system driver of McAfee Drive Encryption (DE) prior to 7.3.0 could allow a local non-admin user to gain elevated system privileges… |
| CVE-2021-31847 | AG Agent Mcafee | 7.8 | Sep 22 | Improper access control vulnerability in the repair process for McAfee Agent for Windows prior to 5.7.4 could allow a local attacker to perform a DLL preloading attack using… |
| CVE-2021-31841 | MA Mcafee Agent Mcafee | 7.3 | Sep 22 | A DLL sideloading vulnerability in McAfee Agent for Windows prior to 5.7.4 could allow a local user to perform a DLL sideloading attack with an unsigned DLL with a specific name… |
| CVE-2021-31836 | MA Mcafee Agent Mcafee | 7.1 | Sep 22 | Improper privilege management vulnerability in maconfig for McAfee Agent for Windows prior to 5.7.4 allows a local user to gain access to sensitive information |
| CVE-2021-31845 | DL Data Loss Prevention Discover Mcafee | 7.3 | Sep 17 | A buffer overflow vulnerability in McAfee Data Loss Prevention (DLP) Discover prior to 11.6.100 allows an attacker in the same network as the DLP Discover to execute arbitrary… |
| CVE-2021-31844 | DL Data Loss Prevention Endpoint Mcafee | 7.3 | Sep 17 | A buffer overflow vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.200 allows a local attacker to execute arbitrary code with elevated… |
| CVE-2021-31843 | ES Endpoint Security Mcafee | 7.8 | Sep 17 | Improper privileges management vulnerability in McAfee Endpoint Security (ENS) Windows prior to 10.7.0 September 2021 Update allows local users to access files which they would… |
| CVE-2021-31842 | ES Endpoint Security Mcafee | 5.5 | Sep 17 | XML Entity Expansion injection vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2021 Update allows a local user to initiate high CPU and… |
| CVE-2021-3712 | EO Epolicy Orchestrator Mcafee | 7.4 | Aug 24 | ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length |
| CVE-2021-2432 | EO Epolicy Orchestrator Mcafee | 3.7 | Jul 21 | Vulnerability in the Java SE product of Oracle Java SE (component: JNDI) |
| CVE-2021-30639 | EO Epolicy Orchestrator Mcafee | 7.5 | Jul 12 | A vulnerability in Apache Tomcat allows an attacker to remotely trigger a denial of service |
| CVE-2021-33037 | EO Epolicy Orchestrator Mcafee | 5.3 | Jul 12 | Incorrect Transfer-Encoding handling with HTTP/1.0 |
| CVE-2021-31838 | ME Mvision Edr Mcafee | 9.1 | Jun 29 | A command injection vulnerability in MVISION EDR (MVEDR) prior to 3.4.0 allows an authenticated MVEDR administrator to trigger the EDR client to execute arbitrary commands through… |