Mcafee Schwachstellen

Zeitverlauf

Typ

Produkt

McAfee ePolicy Orchestrator44
McAfee Network Data Loss Prevention43
McAfee Endpoint Security33
McAfee Data Loss Prevention28
McAfee Agent26

Massnahmen

Official Fix400
Temporary Fix0
Workaround8
Unavailable12
Not Defined105

Ausnutzbarkeit

High20
Functional1
Proof-of-Concept81
Unproven39
Not Defined384

Zugriffsart

Not Defined0
Physical2
Local178
Adjacent21
Network324

Authentisierung

Not Defined0
High52
Low252
None221

Benutzeraktivität

Not Defined0
Required94
None431

C3BM Index

CVSSv3 Base

≤10
≤20
≤38
≤450
≤590
≤6140
≤7108
≤877
≤936
≤1016

CVSSv3 Temp

≤10
≤20
≤38
≤459
≤5120
≤6133
≤7101
≤871
≤927
≤106

VulDB

≤10
≤23
≤316
≤469
≤595
≤6157
≤778
≤860
≤931
≤1016

NVD

≤10
≤20
≤31
≤44
≤532
≤638
≤747
≤861
≤928
≤1013

CNA

≤10
≤21
≤32
≤48
≤522
≤618
≤727
≤834
≤921
≤102

Hersteller

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤82
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k1
<2k8
<5k79
<10k167
<25k200
<50k69
<100k1
≥100k0

Exploit heute

<1k427
<2k23
<5k48
<10k24
<25k3
<50k0
<100k0
≥100k0

Exploitmarktvolumen

🔴 CTI Aktivitäten

Affected Products (131): ASaP Virusscan (1), Active Response (4), Advanced Threat Defense (20), Agent (26), AntiSpyware (1), Antivirus (3), Antivirus Engine (1), Application (3), Application Control (4), Application Control Engine (1), Application and Change Control (2), Asset Manager (2), CMA (2), Change Control (4), Client Proxy (1), Cloud Single Sign On (1), Common Management Agent (1), Common UI (1), Consumer Product Removal Tool (2), Content Security Reporter (1), DLP Endpoint (5), DXL (1), Data Loss Prevention (28), Data Loss Prevention Endpoint (10), Data Loss Prevention ePO Extension (3), Database Security (7), Database Security Server Sensor (1), Data eXchange Layer Framework (1), Drive Encryption (3), E-Business Server (2), E-Mail (2), E-Mail Gateway (4), Email (8), Email Anti-virus (1), Email Gateway (12), Encrypted USB Manager (1), Endpoint Encryption (2), Endpoint Product Removal Tool (1), Endpoint Security (33), Entercept Agent (1), Enterprise Mobility Manager (4), Enterprise Mobility Manager Agent (2), Enterprise Security Manager (8), Epo Mcafee Virtual Technician (1), Exploit Detection (3), FRP (1), File (1), File Lock Driver (2), Firewall Reporter (1), FreeScan (1), Freescan (1), Gateway (4), GetSusp (2), Global Threat Intelligence (1), GroupShield (3), Host Data Loss Prevention (1), Internet Security Suite (3), IntruShield Network Security Manager (2), IntruShield Security (4), IntruShield Security Management System (1), Intrusion Prevention System (1), LinuxShield (1), LiveSafe (1), MVISION EDR (1), MVision Endpoint (7), Management of Native Encryption (1), McAfee ePolicy Orchestrator (1), NeoTrace (1), Network Data Loss Prevention (43), Network Security Management (16), Network Security Manager (4), Network Threat Behavior Analysis (2), PGPNet Daemon (1), Personal Firewall Plus (1), Policy Auditor (3), Product (1), ProtectionPilot (5), Remote Desktop 32 (1), Removable Media Protection (3), Response (3), SaaS Endpoint Protection (3), SafeBoot Device Encryption (1), Safe Connect (1), Scan Engine (1), Secure Mail (1), Security-as-a-Service (1), Security Installer Control System (1), Security Manager (1), Security Scan Plus (1), Skyhigh Secure Web Gateway (1), SmartFilter (2), SmartFilter Administration (1), Superscan (1), TIE (1), TechCheck (1), Tech Check (1), Threat Intelligence Exchange (3), Total Protection (24), Total Protection 2010 (1), Total Protection Free Antivirus Trial (1), True Key (8), UTM Firewall Appliance (5), Unified Threat Management Firewall (1), Virex (2), VirusScan (13), VirusScan Enterprise (17), Virus Scan Enterprise (1), VirusScan Security Center (1), Vulnerability Manager (8), Web Advisor (3), WebAdvisor Browser Extension (1), Web Gateway (25), Web Security (9), Web Security Appliance (1), WebShield (2), WebShield SMTP (1), WebWasher (1), being (1), e-Business Server (1), ePO Cloud (1), ePO Deep Command (1), ePolicy Orchestrator (44), ePolicy Orchestrator Deep Command (1), ePolicy Orchestrator agent (1), ePolicy Orchistrator (2), epolicy orchestrator (1), gent (1), irusscan enterprise (1), myCIO HTTP Server (1), ndpoint Security (1), security management system (1)

Link to Vendor Website: https://www.mcafee.com/

VeröffentlichtBaseTempSchwachstelleProdAusMasEPSSCTICVE
22.08.20236.96.8McAfee Safe Connect erweiterte RechteUnbekanntNot DefinedOfficial Fix0.000650.00CVE-2023-40352
22.03.20235.55.4McAfee Total Protection Component Object Model Privilege EscalationUnbekanntNot DefinedOfficial Fix0.000430.02CVE-2023-25134
13.03.20234.74.6McAfee Total Protection Command Prompt Denial of ServiceUnbekanntNot DefinedOfficial Fix0.000500.00CVE-2023-24579
13.03.20235.45.3McAfee Total Protection erweiterte RechteUnbekanntNot DefinedOfficial Fix0.000480.00CVE-2023-24578
13.03.20235.45.3McAfee Total Protection Registry Key erweiterte RechteUnbekanntNot DefinedOfficial Fix0.000430.02CVE-2023-24577
23.11.20228.88.4McAfee Total Protection erweiterte RechteUnbekanntNot DefinedOfficial Fix0.000650.00CVE-2022-43751
18.08.20227.06.9McAfee Security Scan Plus Configuration File Privilege EscalationUnbekanntNot DefinedOfficial Fix0.000420.05CVE-2022-37025
20.06.20228.48.2McAfee Consumer Product Removal Tool erweiterte RechteUnbekanntNot DefinedOfficial Fix0.000420.00CVE-2022-1824
20.06.20228.48.2McAfee Consumer Product Removal Tool Configuration File erweiterte RechteUnbekanntNot DefinedOfficial Fix0.000420.00CVE-2022-1823
20.04.20225.75.6McAfee Skyhigh Secure Web Gateway RedirectFirewall SoftwareNot DefinedOfficial Fix0.001150.02CVE-2022-1254
14.04.20228.38.1McAfee Agent Repair erweiterte RechteUnbekanntNot DefinedOfficial Fix0.000420.05CVE-2022-1256
14.04.20225.25.1McAfee Agent Database File Information DisclosureUnbekanntNot DefinedOfficial Fix0.000420.00CVE-2022-1257
14.04.20226.26.1McAfee ePolicy Orchestrator SQL InjectionEndpoint Management SoftwareNot DefinedOfficial Fix0.001010.00CVE-2022-1258
23.03.20224.84.7McAfee ePolicy Orchestrator Link Cross Site ScriptingEndpoint Management SoftwareNot DefinedOfficial Fix0.000810.00CVE-2022-0857
23.03.20225.35.2McAfee ePolicy Orchestrator Information DisclosureEndpoint Management SoftwareNot DefinedOfficial Fix0.000420.00CVE-2022-0859
23.03.20223.73.6McAfee being API erweiterte RechteUnbekanntNot DefinedOfficial Fix0.001360.00CVE-2022-0862
23.03.20224.34.2McAfee ePolicy Orchestrator Link Cross Site ScriptingEndpoint Management SoftwareNot DefinedOfficial Fix0.000810.00CVE-2022-0858
23.03.20224.04.0McAfee ePolicy Orchestrator SQL InjectionEndpoint Management SoftwareNot DefinedOfficial Fix0.000650.00CVE-2022-0842
23.03.20224.14.0McAfee ePolicy Orchestrator Extension Import XML External EntityEndpoint Management SoftwareNot DefinedOfficial Fix0.000540.00CVE-2022-0861
11.03.20225.85.7McAfee Total Protection QuickClean Race ConditionUnbekanntNot DefinedOfficial Fix0.000430.00CVE-2022-0280
11.03.20226.96.9McAfee WebAdvisor Browser Extension Settings erweiterte RechteUnbekanntNot DefinedNot Defined0.001500.03CVE-2022-0815
24.01.20227.37.2McAfee Data Loss Prevention ePO Extension SQL InjectionData Loss Prevention SoftwareNot DefinedOfficial Fix0.000820.00CVE-2021-4088
19.01.20228.17.5McAfee Agent Deployment cleanup.exe erweiterte RechteUnbekanntProof-of-ConceptOfficial Fix0.000510.02CVE-2021-31854
19.01.20228.17.8McAfee Agent Installation openssl.cnf erweiterte RechteUnbekanntNot DefinedOfficial Fix0.000440.05CVE-2022-0166
11.01.20228.17.9McAfee TechCheck DLL erweiterte RechteUnbekanntNot DefinedOfficial Fix0.000440.00CVE-2022-0129

500 weitere Einträge werden nicht mehr angezeigt

Interested in the pricing of exploits?

See the underground prices here!