Mcafee Vulnérabilités

Chronologie

Taper

Produit

McAfee ePolicy Orchestrator44
McAfee Network Data Loss Prevention43
McAfee Endpoint Security33
McAfee Data Loss Prevention28
McAfee Agent26

Contre-mesures

Official Fix400
Temporary Fix0
Workaround8
Unavailable12
Not Defined105

Exploitabilité

High19
Functional1
Proof-of-Concept81
Unproven39
Not Defined385

Vecteur d'accès

Not Defined0
Physical2
Local178
Adjacent21
Network324

Authentification

Not Defined0
High52
Low252
None221

Interaction de l'utilisateur

Not Defined0
Required94
None431

C3BM Index

CVSSv3 Base

≤10
≤20
≤38
≤450
≤590
≤6140
≤7108
≤877
≤936
≤1016

CVSSv3 Temp

≤10
≤20
≤38
≤459
≤5120
≤6133
≤7101
≤871
≤927
≤106

VulDB

≤10
≤23
≤316
≤469
≤595
≤6157
≤778
≤860
≤931
≤1016

NVD

≤10
≤20
≤31
≤44
≤532
≤638
≤747
≤861
≤928
≤1013

CNA

≤10
≤21
≤32
≤48
≤522
≤618
≤727
≤834
≤921
≤102

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤82
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k1
<2k8
<5k78
<10k168
<25k200
<50k69
<100k1
≥100k0

Exploiter aujourd'hui

<1k429
<2k24
<5k44
<10k23
<25k5
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (131): ASaP Virusscan (1), Active Response (4), Advanced Threat Defense (20), Agent (26), AntiSpyware (1), Antivirus (3), Antivirus Engine (1), Application (3), Application Control (4), Application Control Engine (1), Application and Change Control (2), Asset Manager (2), CMA (2), Change Control (4), Client Proxy (1), Cloud Single Sign On (1), Common Management Agent (1), Common UI (1), Consumer Product Removal Tool (2), Content Security Reporter (1), DLP Endpoint (5), DXL (1), Data Loss Prevention (28), Data Loss Prevention Endpoint (10), Data Loss Prevention ePO Extension (3), Database Security (7), Database Security Server Sensor (1), Data eXchange Layer Framework (1), Drive Encryption (3), E-Business Server (2), E-Mail (2), E-Mail Gateway (4), Email (8), Email Anti-virus (1), Email Gateway (12), Encrypted USB Manager (1), Endpoint Encryption (2), Endpoint Product Removal Tool (1), Endpoint Security (33), Entercept Agent (1), Enterprise Mobility Manager (4), Enterprise Mobility Manager Agent (2), Enterprise Security Manager (8), Epo Mcafee Virtual Technician (1), Exploit Detection (3), FRP (1), File (1), File Lock Driver (2), Firewall Reporter (1), FreeScan (1), Freescan (1), Gateway (4), GetSusp (2), Global Threat Intelligence (1), GroupShield (3), Host Data Loss Prevention (1), Internet Security Suite (3), IntruShield Network Security Manager (2), IntruShield Security (4), IntruShield Security Management System (1), Intrusion Prevention System (1), LinuxShield (1), LiveSafe (1), MVISION EDR (1), MVision Endpoint (7), Management of Native Encryption (1), McAfee ePolicy Orchestrator (1), NeoTrace (1), Network Data Loss Prevention (43), Network Security Management (16), Network Security Manager (4), Network Threat Behavior Analysis (2), PGPNet Daemon (1), Personal Firewall Plus (1), Policy Auditor (3), Product (1), ProtectionPilot (5), Remote Desktop 32 (1), Removable Media Protection (3), Response (3), SaaS Endpoint Protection (3), SafeBoot Device Encryption (1), Safe Connect (1), Scan Engine (1), Secure Mail (1), Security-as-a-Service (1), Security Installer Control System (1), Security Manager (1), Security Scan Plus (1), Skyhigh Secure Web Gateway (1), SmartFilter (2), SmartFilter Administration (1), Superscan (1), TIE (1), TechCheck (1), Tech Check (1), Threat Intelligence Exchange (3), Total Protection (24), Total Protection 2010 (1), Total Protection Free Antivirus Trial (1), True Key (8), UTM Firewall Appliance (5), Unified Threat Management Firewall (1), Virex (2), VirusScan (13), VirusScan Enterprise (17), Virus Scan Enterprise (1), VirusScan Security Center (1), Vulnerability Manager (8), Web Advisor (3), WebAdvisor Browser Extension (1), Web Gateway (25), Web Security (9), Web Security Appliance (1), WebShield (2), WebShield SMTP (1), WebWasher (1), being (1), e-Business Server (1), ePO Cloud (1), ePO Deep Command (1), ePolicy Orchestrator (44), ePolicy Orchestrator Deep Command (1), ePolicy Orchestrator agent (1), ePolicy Orchistrator (2), epolicy orchestrator (1), gent (1), irusscan enterprise (1), myCIO HTTP Server (1), ndpoint Security (1), security management system (1)

Link to Vendor Website: https://www.mcafee.com/

PubliéBaseTempVulnérabilitéProdExpConEPSSCTICVE
22/08/20236.96.8McAfee Safe Connect elévation de privilègesInconnueNot DefinedOfficial Fix0.000650.00CVE-2023-40352
22/03/20235.55.4McAfee Total Protection Component Object Model Privilege EscalationInconnueNot DefinedOfficial Fix0.000430.02CVE-2023-25134
13/03/20234.74.6McAfee Total Protection Command Prompt dénie de serviceInconnueNot DefinedOfficial Fix0.000500.00CVE-2023-24579
13/03/20235.45.3McAfee Total Protection elévation de privilègesInconnueNot DefinedOfficial Fix0.000480.00CVE-2023-24578
13/03/20235.45.3McAfee Total Protection Registry Key elévation de privilègesInconnueNot DefinedOfficial Fix0.000430.02CVE-2023-24577
23/11/20228.88.4McAfee Total Protection elévation de privilègesInconnueNot DefinedOfficial Fix0.000650.00CVE-2022-43751
18/08/20227.06.9McAfee Security Scan Plus Configuration File Privilege EscalationInconnueNot DefinedOfficial Fix0.000420.00CVE-2022-37025
20/06/20228.48.2McAfee Consumer Product Removal Tool elévation de privilègesInconnueNot DefinedOfficial Fix0.000420.00CVE-2022-1824
20/06/20228.48.2McAfee Consumer Product Removal Tool Configuration File elévation de privilègesInconnueNot DefinedOfficial Fix0.000420.00CVE-2022-1823
20/04/20225.75.6McAfee Skyhigh Secure Web Gateway RedirectFirewall SoftwareNot DefinedOfficial Fix0.001150.02CVE-2022-1254
14/04/20228.38.1McAfee Agent Repair elévation de privilègesInconnueNot DefinedOfficial Fix0.000420.00CVE-2022-1256
14/04/20225.25.1McAfee Agent Database File divulgation de l'informationInconnueNot DefinedOfficial Fix0.000420.02CVE-2022-1257
14/04/20226.26.1McAfee ePolicy Orchestrator sql injectionEndpoint Management SoftwareNot DefinedOfficial Fix0.001010.00CVE-2022-1258
23/03/20224.84.7McAfee ePolicy Orchestrator Link cross site scriptingEndpoint Management SoftwareNot DefinedOfficial Fix0.000810.00CVE-2022-0857
23/03/20225.35.2McAfee ePolicy Orchestrator divulgation de l'informationEndpoint Management SoftwareNot DefinedOfficial Fix0.000420.00CVE-2022-0859
23/03/20223.73.6McAfee being API elévation de privilègesInconnueNot DefinedOfficial Fix0.001360.03CVE-2022-0862
23/03/20224.34.2McAfee ePolicy Orchestrator Link cross site scriptingEndpoint Management SoftwareNot DefinedOfficial Fix0.000810.00CVE-2022-0858
23/03/20224.04.0McAfee ePolicy Orchestrator sql injectionEndpoint Management SoftwareNot DefinedOfficial Fix0.000650.07CVE-2022-0842
23/03/20224.14.0McAfee ePolicy Orchestrator Extension Import XML External EntityEndpoint Management SoftwareNot DefinedOfficial Fix0.000540.00CVE-2022-0861
11/03/20225.85.7McAfee Total Protection QuickClean race conditionInconnueNot DefinedOfficial Fix0.000430.00CVE-2022-0280
11/03/20226.96.9McAfee WebAdvisor Browser Extension Settings elévation de privilègesInconnueNot DefinedNot Defined0.001500.00CVE-2022-0815
24/01/20227.37.2McAfee Data Loss Prevention ePO Extension sql injectionData Loss Prevention SoftwareNot DefinedOfficial Fix0.000820.00CVE-2021-4088
19/01/20228.17.5McAfee Agent Deployment cleanup.exe elévation de privilègesInconnueProof-of-ConceptOfficial Fix0.000510.02CVE-2021-31854
19/01/20228.17.8McAfee Agent Installation openssl.cnf elévation de privilègesInconnueNot DefinedOfficial Fix0.000440.05CVE-2022-0166
11/01/20228.17.9McAfee TechCheck DLL elévation de privilègesInconnueNot DefinedOfficial Fix0.000440.00CVE-2022-0129

500 plus d'entrées ne sont pas affichées

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!