KLA10484 Interface spoofing vulnerability in McAfee Agent

An unspecified vulnerability was found in McAfee Agent. By exploiting this vulnerability malicious users conduct clicjacking attack. This vulnerability can be exploited remotely via a specially designed web page. Original advisories McAfee bulletin Related products McAfee-Agent CVE list...

McAfee Data Loss Prevention Endpoint Information Disclosure Vulnerability

McAfee Data Loss Prevention Endpoint is an integrated endpoint data protection solution from McAfee. The solution prevents theft and accidental disclosure of confidential data and provides security policies for file handling and transfer, shared endpoint data flow control and data encryption. An...

McAfee Email Gateway Cross-Site Scripting Vulnerability

McAfee Email Gateway MEG is a suite of email security solutions from the U.S.-based company McAfee McAfee. The program provides incoming threat protection, outgoing encryption, data loss protection and other features. A cross-site scripting vulnerability exists in McAfee Email Gateway. A remote...

McAfee Data Loss Prevention Endpoint SQL Injection Vulnerability (CNVD-2015-01276)

McAfee Data Loss Prevention Endpoint is an integrated endpoint data protection solution from McAfee. The solution prevents theft and accidental disclosure of confidential data and provides security policies for file handling and transfer, shared endpoint data flow control and data encryption. A S...

McAfee ePO DLPe Extension < 9.3.400 Multiple Vulnerabilities (SB10098)

The remote McAfee ePO server has a vulnerable version of McAfee Data Loss Protection Endpoint DLPe extension installed that is affected by multiple vulnerabilities : - An unspecified SQL injection vulnerability exists due to improper sanitization of user-supplied input. This allows an...

CVE-2015-1619

Cross-site scripting XSS vulnerability in the Secure Web Mail Client user interface in McAfee Email Gateway MEG 7.6.x before 7.6.3.2, 7.5.x before 75.6, 7.0.x through 7.0.5, 5.6, and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified tokens in Digest...

CVE-2015-1618

The ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated users to obtain sensitive password information via a crafted URL...

CVE-2015-1617

Cross-site scripting XSS vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-1616

SQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated ePO users to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated ePO users to execute arbitrary SQL commands via unspecified vectors...

Default credentials

The ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated users to obtain sensitive password information via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in the Secure Web Mail Client user interface in McAfee Email Gateway MEG 7.6.x before 7.6.3.2, 7.5.x before 75.6, 7.0.x through 7.0.5, 5.6, and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified tokens in Digest...

CVE-2015-1616

CVE-2015-1616 affects McAfee Data Loss Prevention Endpoint (DLPe) with the ePO extension prior to 9.3.400. The issue is a SQL injection vulnerability identified as being due to improper input sanitization, allowing remote authenticated ePO users to execute arbitrary SQL commands via unspecified v...

CVE-2015-1618

The ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated users to obtain sensitive password information via a crafted URL...

CVE-2015-1616

SQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated ePO users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-1619

CVE-2015-1619 affects McAfee Email Gateway (MEG) Secure Web Mail Client UI. Multiple sources describe an XSS vulnerability in the UI that permits remote authenticated users to inject arbitrary web script or HTML via unspecified tokens in Digest messages. Affected versions include MEG 7.6.x before...

CVE-2015-1617

CVE-2015-1617 concerns a cross-site scripting (XSS) vulnerability in the McAfee Data Loss Prevention Endpoint (DLPe) ePO extension . The issue affects versions earlier than 9.3.400 and allows a remote, authenticated user to inject arbitrary web script or HTML via unspecified vectors. The impact i...

CVE-2015-1617

Cross-site scripting XSS vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-1618

The CVE-2015-1618 issue affects the McAfee Data Loss Prevention Endpoint (DLPe) ePO extension prior to 9.3.400. A remote, authenticated user can obtain sensitive password information via a specially crafted URL, due to insufficient access checks in the ePO extension. Impact is information disclos...