Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 606

Export CSV
CVE-2017-3962

McAfee Network Security Management (NSM) - Password recovery exploitation vulnerability

Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to crack user passwords via unsalted hashes.

CVSS 3.0 · 5.6 Medium EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Network Security Manager
CVE-2017-3961

SB10192 - Network Security Management (NSM) - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated users to allow arbitrary HTML code to be reflected in the response web page via crafted user input of attributes.

CVSS 3.0 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Network Security Manager
CVE-2017-3960

McAfee Network Security Management (NSM) - Exploitation of Authorization vulnerability

Exploitation of Authorization vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated users to gain elevated privileges via a crafted HTTP request parameter.

CVSS 3.0 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Network Security Manager
CVE-2017-3936

McAfee ePolicy Orchestrator (ePO) - OS Command Injection vulnerability

OS Command Injection vulnerability in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows attackers to run arbitrary OS commands with limited privileges via not sanitizing the user input data before exporting it into a CSV format output.

CVSS 3.0 · 6.2 Medium EPSS 1.4% KEV · Not listed
Vendors
Mcafee
Products
Epolicy Orchestrator
CVE-2017-3912

McAfee Application Control and Change Control (MACC) - password management security feature bypass (SFB) leading to an authentication bypass

Bypassing password security vulnerability in McAfee Application and Change Control (MACC) 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility.

CVSS 3.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Application And Change Control
CVE-2017-3907

McAfee Threat Intelligence Exchange (TIE) Server - Code Injection vulnerability

Code Injection vulnerability in the ePolicy Orchestrator (ePO) extension in McAfee Threat Intelligence Exchange (TIE) Server 2.1.0 and earlier allows remote attackers to execute arbitrary HTML code to be reflected in the response web page via unspecified vector.

CVSS 3.0 · 5.4 Medium EPSS 1.6% KEV · Not listed
Vendors
Mcafee
Products
Mcafee Threat Intelligence Exchange