Vulnerabilidades en McAfee

106 resultados
Análisis Vexday

Com 104 CVEs catalogadas e nenhuma atividade registrada no CISA KEV, o perfil de risco ativo do McAfee situa-se abaixo da média geral do catálogo, o que indica pressão de exploração em produção relativamente contida no momento. Das vulnerabilidades existentes, 3 são de severidade crítica e 5 contam com prova de conceito pública disponível, o que ainda representa superfície de risco para ambientes sem patches atualizados. O maior EPSS observado é de 0,1168, associado a CVE-2017-3897, uma vulnerabilidade de idade considerável cuja probabilidade de exploração persiste e merece atenção em inventários legados. O tipo de falha mais frequente é CWE-79 (Cross-Site Scripting), padrão que sugere oportunidades de melhoria nos controles de sanitização de entrada ao longo da base de código histórica do vendor.

CVE-2019-3654MEDIUMClient Proxy (MCP) - Authentication Bypass vulnerabilityEPSS 0.7%CVE-2020-7293CRITICALWeb Gateway (MWG) - Privilege Escalation vulnerabilityEPSS 0.7%CVE-2017-3933—Embedding Script (XSS) in HTTP Headers vulnerability in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users tEPSS 0.6%CVE-2018-6706LOWMcAfee Agent (MA) non-Windows versions incorrect use of temporary file vulnerabilityEPSS 0.6%CVE-2017-3961LOWSB10192 - Network Security Management (NSM) - Cross-Site Scripting (XSS) vulnerabilityEPSS 0.6%CVE-2017-3964LOWSB10192 - Network Security Management (NSM) - Reflective Cross-Site Scripting (XSS) vulnerabilityEPSS 0.6%CVE-2020-7300MEDIUMDLP ePO extension - Improper AuthorizationEPSS 0.6%CVE-2017-3965HIGHSB10192 - Network Security Management (NSM) - Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerabilityEPSS 0.5%CVE-2018-6669MEDIUMBypass Application Control through an ASP.NET formEPSS 0.5%CVE-2017-4028MEDIUMSB10193 - consumer and corporate products - Maliciously misconfigured registry vulnerabilityEPSS 0.5%CVE-2019-3640MEDIUMData Loss Prevention - Unprotected Transport of CredentialsEPSS 0.5%CVE-2020-7336MEDIUMNetwork Security Management (NSM) - Cross Site Request Forgery vulnerabilityEPSS 0.5%CVE-2020-7256MEDIUMNetwork Security Management (NSM) - Cross site scripting vulnerabilityEPSS 0.5%CVE-2020-7258MEDIUMNetwork Security Management (NSM) - Cross site scripting vulnerabilityEPSS 0.5%CVE-2017-3948—Cross Site Scripting (XSS) in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint (DLP Endpoint) 10.0.x allows authenticatEPSS 0.5%CVE-2020-7301MEDIUMDLP ePO extension - Cross site scriptingEPSS 0.5%CVE-2018-6681MEDIUMSB10244 - Network Security Management (NSM) - Abuse of Functionality vulnerabilityEPSS 0.5%CVE-2020-7304HIGHDLP ePO extension - Cross-site request forgeryEPSS 0.5%CVE-2020-7295LOWWeb Gateway (MWG) - Privilege Escalation vulnerabilityEPSS 0.5%CVE-2020-7303MEDIUMDLP ePO extension - Cross-site scriptingEPSS 0.4%