Mcafee الثغرات

التسلسل الزمني

النوع

منتج

McAfee ePolicy Orchestrator44
McAfee Network Data Loss Prevention43
McAfee Endpoint Security33
McAfee Data Loss Prevention28
McAfee Agent26

معالجة

Official Fix391
Temporary Fix0
Workaround9
Unavailable11
Not Defined105

قابلية الاستغلال

High19
Functional1
Proof-of-Concept80
Unproven39
Not Defined377

متجه الوصول

Not Defined0
Physical2
Local174
Adjacent20
Network320

توثيق

Not Defined0
High50
Low245
None221

تفاعل المستخدم

Not Defined0
Required93
None423

C3BM Index

CVSSv3 Base

≤10
≤20
≤39
≤451
≤591
≤6127
≤7113
≤874
≤935
≤1016

CVSSv3 Temp

≤10
≤20
≤39
≤463
≤5118
≤6125
≤7104
≤865
≤926
≤106

VulDB

≤10
≤23
≤316
≤468
≤594
≤6155
≤776
≤860
≤928
≤1016

NVD

≤10
≤20
≤31
≤44
≤532
≤635
≤746
≤859
≤928
≤1013

CNA

≤10
≤20
≤30
≤42
≤54
≤63
≤78
≤88
≤99
≤100

المجهز

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤82
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

إكسبلويت ذات هجوم فوري

<1k1
<2k7
<5k55
<10k175
<25k206
<50k71
<100k1
≥100k0

إكسبلويت اليوم

<1k342
<2k49
<5k60
<10k44
<25k21
<50k0
<100k0
≥100k0

حجم سوق الإكسبلويت

🔴 CTI النشاطات

Affected Products (128): ASaP Virusscan (1), Active Response (4), Advanced Threat Defense (20), Agent (26), AntiSpyware (1), Antivirus (3), Antivirus Engine (1), Application (3), Application Control (4), Application Control Engine (1), Application and Change Control (2), Asset Manager (2), CMA (2), Change Control (4), Client Proxy (1), Cloud Single Sign On (1), Common Management Agent (1), Common UI (1), Content Security Reporter (1), DLP Endpoint (5), DXL (1), Data Loss Prevention (28), Data Loss Prevention Endpoint (10), Data Loss Prevention ePO Extension (3), Database Security (7), Database Security Server Sensor (1), Data eXchange Layer Framework (1), Drive Encryption (3), E-Business Server (2), E-Mail (2), E-Mail Gateway (4), Email (8), Email Anti-virus (1), Email Gateway (12), Encrypted USB Manager (1), Endpoint Encryption (2), Endpoint Product Removal Tool (1), Endpoint Security (33), Entercept Agent (1), Enterprise Mobility Manager (4), Enterprise Mobility Manager Agent (2), Enterprise Security Manager (8), Epo Mcafee Virtual Technician (1), Exploit Detection (3), FRP (1), File (1), File Lock Driver (2), Firewall Reporter (1), FreeScan (1), Freescan (1), Gateway (4), GetSusp (2), Global Threat Intelligence (1), GroupShield (3), Host Data Loss Prevention (1), Internet Security Suite (3), IntruShield Network Security Manager (2), IntruShield Security (4), IntruShield Security Management System (1), Intrusion Prevention System (1), LinuxShield (1), LiveSafe (1), MVISION EDR (1), MVision Endpoint (7), Management of Native Encryption (1), McAfee ePolicy Orchestrator (1), NeoTrace (1), Network Data Loss Prevention (43), Network Security Management (16), Network Security Manager (4), Network Threat Behavior Analysis (2), PGPNet Daemon (1), Personal Firewall Plus (1), Policy Auditor (3), Product (1), ProtectionPilot (5), Remote Desktop 32 (1), Removable Media Protection (3), Response (3), SaaS Endpoint Protection (3), SafeBoot Device Encryption (1), Scan Engine (1), Secure Mail (1), Security-as-a-Service (1), Security Installer Control System (1), Security Manager (1), Skyhigh Secure Web Gateway (1), SmartFilter (2), SmartFilter Administration (1), Superscan (1), TIE (1), TechCheck (1), Tech Check (1), Threat Intelligence Exchange (3), Total Protection (19), Total Protection 2010 (1), Total Protection Free Antivirus Trial (1), True Key (8), UTM Firewall Appliance (5), Unified Threat Management Firewall (1), Virex (2), VirusScan (13), VirusScan Enterprise (17), Virus Scan Enterprise (1), VirusScan Security Center (1), Vulnerability Manager (8), Web Advisor (3), WebAdvisor Browser Extension (1), Web Gateway (25), Web Security (9), Web Security Appliance (1), WebShield (2), WebShield SMTP (1), WebWasher (1), being (1), e-Business Server (1), ePO Cloud (1), ePO Deep Command (1), ePolicy Orchestrator (44), ePolicy Orchestrator Deep Command (1), ePolicy Orchestrator agent (1), ePolicy Orchistrator (2), epolicy orchestrator (1), gent (1), irusscan enterprise (1), myCIO HTTP Server (1), ndpoint Security (1), security management system (1)

Link to Vendor Website: https://www.mcafee.com/

منشورBaseTempالثغرةProdق�معالجةCTICVE
20/04/20225.75.6McAfee Skyhigh Secure Web Gateway RedirectFirewall SoftwareNot DefinedOfficial Fix0.04CVE-2022-1254
14/04/20228.38.1McAfee Agent Repair تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.30CVE-2022-1256
14/04/20225.25.1McAfee Agent Database File الكشف عن المعلوماتغير معروفNot DefinedOfficial Fix0.00CVE-2022-1257
14/04/20226.26.1McAfee ePolicy Orchestrator حقن إس كيو إلEndpoint Management SoftwareNot DefinedOfficial Fix0.04CVE-2022-1258
23/03/20224.84.7McAfee ePolicy Orchestrator Link سكربتات مشتركةEndpoint Management SoftwareNot DefinedOfficial Fix0.05CVE-2022-0857
23/03/20225.35.2McAfee ePolicy Orchestrator الكشف عن المعلوماتEndpoint Management SoftwareNot DefinedOfficial Fix0.04CVE-2022-0859
23/03/20223.73.6McAfee being API تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.04CVE-2022-0862
23/03/20224.34.2McAfee ePolicy Orchestrator Link سكربتات مشتركةEndpoint Management SoftwareNot DefinedOfficial Fix0.00CVE-2022-0858
23/03/20224.04.0McAfee ePolicy Orchestrator حقن إس كيو إلEndpoint Management SoftwareNot DefinedOfficial Fix0.03CVE-2022-0842
23/03/20224.14.0McAfee ePolicy Orchestrator Extension Import XML External EntityEndpoint Management SoftwareNot DefinedOfficial Fix0.00CVE-2022-0861
11/03/20225.85.7McAfee Total Protection QuickClean حالة السباقغير معروفNot DefinedOfficial Fix0.03CVE-2022-0280
11/03/20226.96.9McAfee WebAdvisor Browser Extension Settings تجاوز الصلاحياتغير معروفNot DefinedNot Defined0.00CVE-2022-0815
24/01/20227.37.2McAfee Data Loss Prevention ePO Extension حقن إس كيو إلData Loss Prevention SoftwareNot DefinedOfficial Fix0.03CVE-2021-4088
19/01/20228.17.5McAfee Agent Deployment cleanup.exe تجاوز الصلاحياتغير معروفProof-of-ConceptOfficial Fix0.00CVE-2021-31854
19/01/20228.17.8McAfee Agent Installation openssl.cnf تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.00CVE-2022-0166
11/01/20228.17.9McAfee TechCheck DLL تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.03CVE-2022-0129
04/01/20228.07.8McAfee Application and Change Control Update تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.00CVE-2021-31833
09/12/20213.63.5McAfee Network Security Manager Administrator Interface سكربتات مشتركةغير معروفNot DefinedOfficial Fix0.00CVE-2021-4038
08/12/20215.65.6McAfee Database Security DBS Server تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.05CVE-2021-31850
24/11/20215.25.1McAfee Policy Auditor Web-based Interface سكربتات مشتركةغير معروفNot DefinedOfficial Fix0.05CVE-2021-31852
24/11/20215.25.1McAfee Policy Auditor Web-based Interface سكربتات مشتركةغير معروفNot DefinedOfficial Fix0.03CVE-2021-31851
10/11/20218.38.1McAfee Drive Encryption DLL Loader تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.04CVE-2021-31853
02/11/20215.45.3McAfee Data Loss Prevention ePO Extension سكربتات مشتركةData Loss Prevention SoftwareNot DefinedOfficial Fix0.03CVE-2021-31848
02/11/20216.56.4McAfee Data Loss Prevention ePO Extension حقن إس كيو إلData Loss Prevention SoftwareNot DefinedOfficial Fix0.03CVE-2021-31849
27/10/20217.27.1McAfee Total Protection Temporary Files تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.08CVE-2021-23877

491 بعض الادخالات لم يتم عرضها

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!