CVE-2020-7269: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense ATD prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deploy...

迈克菲 McAfee Content Security Reporter 安全漏洞

McAfee Content Security Reporter is an application from McAfee, Inc. A reporting software solution that helps you identify and analyze a variety of data collected from network devices. A security vulnerability exists in McAfee Content Security Reporter CSR prior to version 2.8.0, which stems from...

PT-2021-12643 · Mcafee · Mcafee Advanced Threat Defense

Name of the Vulnerable Software and Affected Versions: McAfee Advanced Threat Defense ATD versions prior to 4.12.2 Description: The issue allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter in the web interface. The risk is...

CVE-2021-23884: Cleartext Transmission of Sensitive Information

Cleartext Transmission of Sensitive Information vulnerability in the ePO Extension of McAfee Content Security Reporter CSR prior to 2.8.0 allows an ePO administrator to view the unencrypted password of the McAfee Web Gateway MWG or the password of the McAfee Web Gateway Cloud Server MWGCS read on...

PT-2021-12645 · Mcafee · Mcafee Endpoint Security (Ens) For Windows +1

Name of the Vulnerable Software and Affected Versions: McAfee Endpoint Security ENS for Windows versions prior to 10.7.0 February 2021 Update Description: The issue allows a remote attacker to view requests from ENS and responses from McAfee Global Threat Intelligence GTI servers over DNS. This i...

Mcafee Data Loss Prevention Endpoint 安全漏洞

Mcafee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from Mcafee. The solution prevents theft and accidental disclosure of confidential data and provides security policies for file handling and transfer, shared endpoint data flow control, and data encryptio...

PT-2021-15586 · Mcafee · Mcafee Web Gateway +2

Name of the Vulnerable Software and Affected Versions: McAfee Content Security Reporter CSR versions prior to 2.8.0 Description: The issue allows an ePO administrator to view unencrypted passwords of the McAfee Web Gateway MWG or the McAfee Web Gateway Cloud Server MWGCS read-only user. This occu...

Mcafee McAfee Endpoint Security 安全漏洞

Mcafee McAfee Endpoint Security ENS is a set of U.S. McAfee Mcafee company to provide intelligent collaboration and advanced threat defense framework. The framework supports control of the entire threat defense lifecycle for real-time communications and actionable threat forensics, among other...

CVE-2020-7270: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense ATD prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deploy...

PT-2021-15588 · Mcafee · Mcafee Data Loss Prevention Endpoint

Name of the Vulnerable Software and Affected Versions: McAfee Data Loss Prevention DLP Endpoint for Windows versions prior to 11.6.100 Description: A Denial of Service issue allows a local, low privileged, attacker to cause a BSoD through suspending a process, modifying the process's memory and...

The vulnerability of the McAfee Data Loss Prevention Endpoint software for Windows, related to insecure management of privileges, allows a perpetrator to execute DLL libraries.

The vulnerability of the McAfee Data Loss Prevention Endpoint software for Windows relates to insecure management of privileges. Exploiting this vulnerability could allow an attacker to load DLL libraries using specially crafted IOCTL calls...

McAfee ePolicy Orchestrator Multiple Vulnerabilities (SB10352)

The instance of McAfee ePolicy Orchestrator installed on the remote host is potentially affected by the following vulnerabilities: - An unvalidated client-side URL redirect vulnerability exists in McAfee ePolicy Orchestrator ePO. An unauthenticated, remote attacker could exploit this to cause an...

The vulnerability of the ePolicy Orchestrator extension of the McAfee Data Loss Prevention software allows a hacker to upload malicious files.

The vulnerability of the ePolicy Orchestrator extension of the McAfee Data Loss Prevention software lies in the ability to upload malicious files without limitation. Exploiting this vulnerability could allow a remote attacker to upload malware files...

McAfee ePolicy Orchestrator Cross-Site Scripting Vulnerability

McAfee ePolicy Orchistrator ePO is a suite of scalable security management software from McAfee. The software enables centralized, streamlined management of endpoint, network, content security and compliance solutions. A cross-site scripting vulnerability exists in McAfee ePolicy Orchestrator ePO...

McAfee ePolicy Orchestrator Information Disclosure Vulnerability (CNVD-2021-24351)

McAfee ePolicy Orchistrator ePO is a suite of scalable security management software from McAfee. The software enables centralized, streamlined management of endpoint, network, content security and compliance solutions. An information disclosure vulnerability exists in McAfee ePolicy Orchestrator...

McAfee ePolicy Orchestrator URL Redirection Vulnerability

McAfee ePolicy Orchestrator ePO is a suite of scalable security management software from McAfee. The software enables centralized, streamlined management of endpoint, network, content security and compliance solutions. A security vulnerability exists in versions of McAfee ePolicy Orchestrator ePO...

CVE-2021-23889

Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator ePO prior to 5.10 Update 10 allows ePO administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized...

CVE-2021-23890

Information leak vulnerability in the Agent Handler of McAfee ePolicy Orchestrator ePO prior to 5.10 Update 10 allows an unauthenticated user to download McAfee product packages specifically McAfee Agent available in ePO repository and install them on their own machines to have it managed and the...

CVE-2021-23889

Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator ePO prior to 5.10 Update 10 allows ePO administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized...

CVE-2021-23890

Information leak vulnerability in the Agent Handler of McAfee ePolicy Orchestrator ePO prior to 5.10 Update 10 allows an unauthenticated user to download McAfee product packages specifically McAfee Agent available in ePO repository and install them on their own machines to have it managed and the...