Mcafee 漏洞

时间轴

类型

产品

McAfee ePolicy Orchestrator44
McAfee Network Data Loss Prevention43
McAfee Endpoint Security33
McAfee Data Loss Prevention28
McAfee Agent26

修正

Official Fix400
Temporary Fix0
Workaround8
Unavailable12
Not Defined105

易受攻击性

High20
Functional1
Proof-of-Concept81
Unproven39
Not Defined384

访问向量

Not Defined0
Physical2
Local178
Adjacent21
Network324

身份验证

Not Defined0
High52
Low252
None221

用户交互

Not Defined0
Required94
None431

C3BM Index

CVSSv3 Base

≤10
≤20
≤38
≤450
≤590
≤6140
≤7108
≤877
≤936
≤1016

CVSSv3 Temp

≤10
≤20
≤38
≤459
≤5120
≤6133
≤7101
≤871
≤927
≤106

VulDB

≤10
≤23
≤316
≤469
≤595
≤6157
≤778
≤860
≤931
≤1016

NVD

≤10
≤20
≤31
≤44
≤532
≤638
≤747
≤861
≤928
≤1013

CNA

≤10
≤21
≤32
≤48
≤522
≤618
≤727
≤834
≤921
≤102

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤82
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k1
<2k8
<5k79
<10k167
<25k200
<50k69
<100k1
≥100k0

本日攻击

<1k426
<2k27
<5k46
<10k23
<25k3
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (131): ASaP Virusscan (1), Active Response (4), Advanced Threat Defense (20), Agent (26), AntiSpyware (1), Antivirus (3), Antivirus Engine (1), Application (3), Application Control (4), Application Control Engine (1), Application and Change Control (2), Asset Manager (2), CMA (2), Change Control (4), Client Proxy (1), Cloud Single Sign On (1), Common Management Agent (1), Common UI (1), Consumer Product Removal Tool (2), Content Security Reporter (1), DLP Endpoint (5), DXL (1), Data Loss Prevention (28), Data Loss Prevention Endpoint (10), Data Loss Prevention ePO Extension (3), Database Security (7), Database Security Server Sensor (1), Data eXchange Layer Framework (1), Drive Encryption (3), E-Business Server (2), E-Mail (2), E-Mail Gateway (4), Email (8), Email Anti-virus (1), Email Gateway (12), Encrypted USB Manager (1), Endpoint Encryption (2), Endpoint Product Removal Tool (1), Endpoint Security (33), Entercept Agent (1), Enterprise Mobility Manager (4), Enterprise Mobility Manager Agent (2), Enterprise Security Manager (8), Epo Mcafee Virtual Technician (1), Exploit Detection (3), FRP (1), File (1), File Lock Driver (2), Firewall Reporter (1), FreeScan (1), Freescan (1), Gateway (4), GetSusp (2), Global Threat Intelligence (1), GroupShield (3), Host Data Loss Prevention (1), Internet Security Suite (3), IntruShield Network Security Manager (2), IntruShield Security (4), IntruShield Security Management System (1), Intrusion Prevention System (1), LinuxShield (1), LiveSafe (1), MVISION EDR (1), MVision Endpoint (7), Management of Native Encryption (1), McAfee ePolicy Orchestrator (1), NeoTrace (1), Network Data Loss Prevention (43), Network Security Management (16), Network Security Manager (4), Network Threat Behavior Analysis (2), PGPNet Daemon (1), Personal Firewall Plus (1), Policy Auditor (3), Product (1), ProtectionPilot (5), Remote Desktop 32 (1), Removable Media Protection (3), Response (3), SaaS Endpoint Protection (3), SafeBoot Device Encryption (1), Safe Connect (1), Scan Engine (1), Secure Mail (1), Security-as-a-Service (1), Security Installer Control System (1), Security Manager (1), Security Scan Plus (1), Skyhigh Secure Web Gateway (1), SmartFilter (2), SmartFilter Administration (1), Superscan (1), TIE (1), TechCheck (1), Tech Check (1), Threat Intelligence Exchange (3), Total Protection (24), Total Protection 2010 (1), Total Protection Free Antivirus Trial (1), True Key (8), UTM Firewall Appliance (5), Unified Threat Management Firewall (1), Virex (2), VirusScan (13), VirusScan Enterprise (17), Virus Scan Enterprise (1), VirusScan Security Center (1), Vulnerability Manager (8), Web Advisor (3), WebAdvisor Browser Extension (1), Web Gateway (25), Web Security (9), Web Security Appliance (1), WebShield (2), WebShield SMTP (1), WebWasher (1), being (1), e-Business Server (1), ePO Cloud (1), ePO Deep Command (1), ePolicy Orchestrator (44), ePolicy Orchestrator Deep Command (1), ePolicy Orchestrator agent (1), ePolicy Orchistrator (2), epolicy orchestrator (1), gent (1), irusscan enterprise (1), myCIO HTTP Server (1), ndpoint Security (1), security management system (1)

Link to Vendor Website: https://www.mcafee.com/

已发布BaseTemp漏洞Prod修正EPSSCTICVE
2023-08-226.96.8McAfee Safe Connect 权限升级未知Not DefinedOfficial Fix0.000650.00CVE-2023-40352
2023-03-225.55.4McAfee Total Protection Component Object Model Privilege Escalation未知Not DefinedOfficial Fix0.000430.02CVE-2023-25134
2023-03-134.74.6McAfee Total Protection Command Prompt 拒绝服务未知Not DefinedOfficial Fix0.000500.00CVE-2023-24579
2023-03-135.45.3McAfee Total Protection 权限升级未知Not DefinedOfficial Fix0.000480.00CVE-2023-24578
2023-03-135.45.3McAfee Total Protection Registry Key 权限升级未知Not DefinedOfficial Fix0.000430.02CVE-2023-24577
2022-11-238.88.4McAfee Total Protection 权限升级未知Not DefinedOfficial Fix0.000650.00CVE-2022-43751
2022-08-187.06.9McAfee Security Scan Plus Configuration File Privilege Escalation未知Not DefinedOfficial Fix0.000420.00CVE-2022-37025
2022-06-208.48.2McAfee Consumer Product Removal Tool 权限升级未知Not DefinedOfficial Fix0.000420.00CVE-2022-1824
2022-06-208.48.2McAfee Consumer Product Removal Tool Configuration File 权限升级未知Not DefinedOfficial Fix0.000420.00CVE-2022-1823
2022-04-205.75.6McAfee Skyhigh Secure Web Gateway RedirectFirewall SoftwareNot DefinedOfficial Fix0.001150.02CVE-2022-1254
2022-04-148.38.1McAfee Agent Repair 权限升级未知Not DefinedOfficial Fix0.000420.00CVE-2022-1256
2022-04-145.25.1McAfee Agent Database File 信息公开未知Not DefinedOfficial Fix0.000420.02CVE-2022-1257
2022-04-146.26.1McAfee ePolicy Orchestrator SQL注入Endpoint Management SoftwareNot DefinedOfficial Fix0.001010.00CVE-2022-1258
2022-03-234.84.7McAfee ePolicy Orchestrator Link 跨网站脚本Endpoint Management SoftwareNot DefinedOfficial Fix0.000810.00CVE-2022-0857
2022-03-235.35.2McAfee ePolicy Orchestrator 信息公开Endpoint Management SoftwareNot DefinedOfficial Fix0.000420.00CVE-2022-0859
2022-03-233.73.6McAfee being API 权限升级未知Not DefinedOfficial Fix0.001360.03CVE-2022-0862
2022-03-234.34.2McAfee ePolicy Orchestrator Link 跨网站脚本Endpoint Management SoftwareNot DefinedOfficial Fix0.000810.00CVE-2022-0858
2022-03-234.04.0McAfee ePolicy Orchestrator SQL注入Endpoint Management SoftwareNot DefinedOfficial Fix0.000650.00CVE-2022-0842
2022-03-234.14.0McAfee ePolicy Orchestrator Extension Import XML External EntityEndpoint Management SoftwareNot DefinedOfficial Fix0.000540.00CVE-2022-0861
2022-03-115.85.7McAfee Total Protection QuickClean 竞争条件未知Not DefinedOfficial Fix0.000430.00CVE-2022-0280
2022-03-116.96.9McAfee WebAdvisor Browser Extension Settings 权限升级未知Not DefinedNot Defined0.001500.03CVE-2022-0815
2022-01-247.37.2McAfee Data Loss Prevention ePO Extension SQL注入Data Loss Prevention SoftwareNot DefinedOfficial Fix0.000820.00CVE-2021-4088
2022-01-198.17.5McAfee Agent Deployment cleanup.exe 权限升级未知Proof-of-ConceptOfficial Fix0.000510.02CVE-2021-31854
2022-01-198.17.8McAfee Agent Installation openssl.cnf 权限升级未知Not DefinedOfficial Fix0.000440.05CVE-2022-0166
2022-01-118.17.9McAfee TechCheck DLL 权限升级未知Not DefinedOfficial Fix0.000440.00CVE-2022-0129

500 更多条目未显示

Want to stay up to date on a daily basis?

Enable the mail alert feature now!