CVE-2015-3030

The web interface in McAfee Advanced Threat Defense MATD before 3.4.4.63 allows remote authenticated users to obtain sensitive configuration information via unspecified vectors...

CVE-2015-3028

McAfee Advanced Threat Defense MATD before 3.4.4.63 allows remote authenticated users to bypass intended restrictions and change or update configuration settings via crafted parameters...

CVE-2015-3029

CVE-2015-3029 affects McAfee Advanced Threat Defense (MATD) before version 3.4.4.63. The web interface does not properly restrict access, allowing remote authenticated users to obtain sensitive information via unspecified vectors (information disclosure). Affected product/version: MATD

KLA10538 Multiple vulnerabilities in McAfee ATD

Multiple serious vulnerabilities have been found in McAfee ATD. Malicious users can exploit these vulnerabilities to obtain sensitive information or bypass security restrictions. Below is a complete list of vulnerabilities 1. Improper access restrictions and other unknown vulnerabilities can be...

McAfee ePO DLPe Extension < 9.3.416.4 Multiple Vulnerabilities (SB10111)

The remote McAfee ePO server has a version of the McAfee Data Loss Protection Endpoint DLPe installed that is affected by multiple vulnerabilities : - The ePO extension is affected by an unspecified denial of service vulnerability via a database lock or license corruption, which can be exploited ...

McAfee Email Gateway Digest Token Reflected XSS (SB10099)

The remote host has a version of McAfee Email Gateway MEG installed that is affected by a reflected cross-site scripting vulnerability due to improper validation of user-supplied input to unspecified tokens in digest messages. A remote attacker can exploit this, via a specially crafted request, t...

McAfee Data Loss Prevention Endpoint EPO Extended Denial of Service Vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from the U.S. company McAfee McAfee. A security vulnerability in the McAfee Data Loss Prevention Endpoint DLPe epo extension allows a remote attacker to submit a special request to lock a database or enab...

McAfee Data Loss Prevention Endpoint EPO Extended Information Disclosure Vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from the U.S. company McAfee McAfee. A security vulnerability in the McAfee Data Loss Prevention Endpoint DLPe epo extension allows remote attackers to submit a special URL request to obtain sensitive...

McAfee Data Loss Prevention Endpoint EPO Extended Cross-Site Scripting Vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from the U.S. company McAfee McAfee. The McAfee Data Loss Prevention Endpoint DLPe epo extension suffers from a cross-site scripting vulnerability that could be exploited by a remote attacker to inject...

McAfee Data Loss Prevention Endpoint EPO Extended Cross-Site Request Forgery Vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from the U.S. company McAfee McAfee. A cross-site request forgery vulnerability exists in the McAfee Data Loss Prevention Endpoint DLPe epo extension, which allows remote attackers to construct malicious...

CVE-2015-2760

Cross-site scripting XSS vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3 Patch 4 Hotfix 16 9.3.416.4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-2758

The ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3 Patch 4 Hotfix 16 9.3.416.4 allows remote authenticated users to obtain sensitive information, modify the database, or possibly have other unspecified impact via a crafted URL...

CVE-2015-2757

The ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3 Patch 4 Hotfix 16 9.3.416.4 allows remote authenticated users to cause a denial of service database lock or license corruption via unspecified vectors...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3 Patch 4 Hotfix 16 9.3.416.4 allow remote attackers to hijack the authentication of users for requests that 1 obtain sensitive information or 2 modify the database...

Memory corruption

The ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3 Patch 4 Hotfix 16 9.3.416.4 allows remote authenticated users to cause a denial of service database lock or license corruption via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3 Patch 4 Hotfix 16 9.3.416.4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Code injection

The ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3 Patch 4 Hotfix 16 9.3.416.4 allows remote authenticated users to obtain sensitive information, modify the database, or possibly have other unspecified impact via a crafted URL...

CVE-2015-2757

The ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3 Patch 4 Hotfix 16 9.3.416.4 allows remote authenticated users to cause a denial of service database lock or license corruption via unspecified vectors...

CVE-2015-2759

Multiple cross-site request forgery CSRF vulnerabilities in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3 Patch 4 Hotfix 16 9.3.416.4 allow remote attackers to hijack the authentication of users for requests that 1 obtain sensitive information or 2 modify the database...

CVE-2015-2758

The ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3 Patch 4 Hotfix 16 9.3.416.4 allows remote authenticated users to obtain sensitive information, modify the database, or possibly have other unspecified impact via a crafted URL...