CVE-2017-4052

CVE-2017-4052 concerns McAfee Advanced Threat Defense (ATD). The connected sources confirm an authentication bypass vulnerability in the web interface affecting ATD versions 3.10, 3.8, 3.6, and 3.4, allowing remote unauthenticated users to change or update arbitrary configuration settings or gain...

CVE-2017-4053

Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense ATD 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to execute a command of their choice via a crafted HTTP request parameter...

CVE-2017-4057

Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense ATD 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to gain elevated privileges via the GUI or GUI terminal commands...

CVE-2017-4053

CVE-2017-4053 affects McAfee Advanced Threat Defense (ATD) web interface, with command injection in the HTTP parameter of ATD versions 3.10, 3.8, 3.6 and 3.4. The vulnerability allows remote unauthenticated attackers to execute arbitrary commands via a crafted request. Connected documents corrobo...

CVE-2017-4055

CVE-2017-4055 affects McAfee Advanced Threat Defense (ATD) Web Interface, with versions 3.10, 3.8, 3.6, and 3.4. The issue is a vulnerability in authentication/authorization enforcement that lets remote unauthenticated users bypass ATD detection via loose authentication checks, enabling bypass of...

CVE-2017-4054

CVE-2017-4054 affects McAfee Advanced Threat Defense (ATD) web interface versions 3.4, 3.6, 3.8 and 3.10. The vulnerability is a Command Injection in the web interface that allows remote authenticated users to execute arbitrary commands via a crafted HTTP request parameter. The provided connected...

CVE-2017-4052

Authentication Bypass vulnerability in the web interface in McAfee Advanced Threat Defense ATD 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to change or update any configuration settings, or gain administrator functionality via a crafted HTTP request parameter...

community.mcafee.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-259357 Description| Value ---|--- Affected Website:| community.mcafee.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

McAfee Data Loss Prevention Endpoint ePO extension cross-site scripting vulnerability

McAfee Data Loss Prevention Endpoint DLP Endpoint is an integrated endpoint data protection solution from McAfee, Inc. that prevents theft and accidental disclosure of confidential data and provides security policies for file handling and transfer, shared endpoint data flow control, and data...

CVE-2017-3948

Cross Site Scripting XSS in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint DLP Endpoint 10.0.x allows authenticated users to inject arbitrary web script or HTML via injecting malicious JavaScript into a user's browsing session...

CVE-2017-3948

Cross Site Scripting XSS in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint DLP Endpoint 10.0.x allows authenticated users to inject arbitrary web script or HTML via injecting malicious JavaScript into a user's browsing session...

Cross site scripting

Cross Site Scripting XSS in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint DLP Endpoint 10.0.x allows authenticated users to inject arbitrary web script or HTML via injecting malicious JavaScript into a user's browsing session...

CVE-2017-3948

Cross Site Scripting XSS in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint DLP Endpoint 10.0.x allows authenticated users to inject arbitrary web script or HTML via injecting malicious JavaScript into a user's browsing session...

CVE-2017-3948

Summary: CVE-2017-3948 is a Cross Site Scripting (XSS) vulnerability in the IMG Tags of the ePO extension for McAfee Data Loss Prevention Endpoint (DLP Endpoint) 10.0.x. The underlying issue is an XSS in IMG Tags that allows an authenticated user to inject arbitrary web script or HTML via malicio...

McAfee Antivirus Engine Out of Date

McAfee VirusScan, an antivirus application, is installed on the remote host. However, its antivirus engine is out of date and should be upgraded. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid100784; scriptversion"1.3";...

McAfee ePolicy Orchestrator 5.1.x < 5.1.3 HF1193124 / 5.3.x < 5.3.1 HF1194398 / 5.3.2 < 5.3.2 HF1193123 / 5.9.x < 5.9.0 HF1193951 Path Traversal RCE (SB10196)

The version of McAfee ePolicy Orchestrator ePO installed on the remote Windows host is 5.1.x prior to 5.1.3 hotfix 1193124, 5.3.x prior to 5.3.1 hotfix 1194398, 5.3.2 prior to 5.3.2 hotfix 1193123, or 5.9.x prior to 5.9.0 hotfix 1193951. It is affected by a remote command execution vulnerability...

McAfee ePolicy Orchestrator Directory Traversal Vulnerability

McAfee ePolicy Orchestrator is prone to a directory traversal vulnerability which allows remote authenticated users to execute a command of their choice via an authenticated ePO session. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources,...

McAfee Application Control / Change Control Installed

Binary data mcafeeappctlinstalled.nbin...

Directory traversal

A directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator ePO 5.9.0, 5.3.2, and 5.1.3 and earlier allows remote authenticated users to execute a command of their choice via an authenticated ePO session...

CVE-2017-3980

A directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator ePO 5.9.0, 5.3.2, and 5.1.3 and earlier allows remote authenticated users to execute a command of their choice via an authenticated ePO session...