McAfee VirusScan Enterprise 8.8 < 8.8 Patch 1 DoS

The remote Windows host has a version of McAfee VirusScan Enterprise VSE 8.8 prior to 8.8 Patch 1. It is, therefore, affected by a denial of service vulnerability due to a flaw in Self Protection. Malicious software can change the NTFS folder permissions on VSE folders and disable the software. C...

McAfee VirusScan Enterprise 8.5 / 8.7 hcp:// Security Bypass (SB10012)

The remote Windows host has McAfee VirusScan Enterprise version 8.5 or 8.7. It is, therefore, affected by a security bypass vulnerability due to a failure to properly interact with the processing of 'hcp://' URLs. This can lead to malware execution prior to detection. C Tenable Network Security,...

McAfee VirusScan Enterprise < 8.8 / 8.7 HF643440 CLI Local Privilege Escalation (SB10014)

The remote Windows host has a version of McAfee VirusScan Enterprise VSE prior to 8.8 or 8.7 Hot-Fix 643440. It is, therefore, reportedly affected by a CLI local privilege escalation vulnerability that could disable VSE and its connection to McAfee ePolicy Orchestrator ePO. C Tenable Network...

CVE-2013-5094

Cross-site scripting XSS vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inject arbitrary web script or HTML via the certcn cookie parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inject arbitrary web script or HTML via the certcn cookie parameter...

CVE-2013-5094

Cross-site scripting XSS vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inject arbitrary web script or HTML via the certcn cookie parameter...

CVE-2013-5094

CVE-2013-5094 is an XSS vulnerability in McAfee Vulnerability Manager 7.5, caused by unsafe handling in the index.exp script via the cert_cn cookie parameter. The vulnerability allows a remote attacker to inject and execute arbitrary script in a user’s browser. Public references note this as a cr...

McAfee VirusScan Enterprise 8.8 Patch 2 < HF778101 Local Privilege Escalation (SB10038)

The version of McAfee VirusScan Enterprise installed on the remote Windows host is 8.8 Patch 2 prior to Hotfix 778101. It is, therefore, affected by a privilege escalation vulnerability due to an unspecified error related to the enforcement of security permissions. A local attacker can exploit th...

CVE-2013-4884

Cross-site scripting XSS vulnerability in McAfee SuperScan 4.0 allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded sequences in a server response, which is not properly handled in the SuperScan HTML report...

Cross site scripting

Cross-site scripting XSS vulnerability in McAfee SuperScan 4.0 allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded sequences in a server response, which is not properly handled in the SuperScan HTML report...

CVE-2013-4884

Cross-site scripting XSS vulnerability in McAfee SuperScan 4.0 allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded sequences in a server response, which is not properly handled in the SuperScan HTML report...

CVE-2013-4884

McAfee SuperScan 4.0 is affected by CVE-2013-4884: an XSS vulnerability where UTF-7 encoded sequences in a server response are not properly handled in the SuperScan HTML report, enabling injection of arbitrary script. Affected product: SuperScan 4.0 (Windows port scanning tool). Underlying cause:...

CVE-2014-1472

Multiple cross-site scripting XSS vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-1473

Multiple cross-site request forgery CSRF vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.5 and earlier allow remote attackers to hijack the authentication of users for requests that modify HTML via unspecified vectors related to the "response web page."...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.5 and earlier allow remote attackers to hijack the authentication of users for requests that modify HTML via unspecified vectors related to the "response web page."...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-1472

Multiple cross-site scripting XSS vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-1472

CVE-2014-1472 affects McAfee Vulnerability Manager (MVM) Enterprise Manager. Multiple XSS vulnerabilities exist in MVM 7.5.5 and earlier, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Exploitation details, affected build ranges, and exact impact beyond ...

CVE-2014-1473

McAfee Vulnerability Manager (Enterprise Manager) is affected by CVE-2014-1473, with multiple CSRF issues leading to hijacking of user authentication for HTML-modifying requests. The affected versions include MVM 7.0.x prior to 7.0.11.05002, 7.5.x prior to 7.5.4, 7.5.4 prior to 7.5.4.05007, and 7...

CVE-2014-1473

Multiple cross-site request forgery CSRF vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.5 and earlier allow remote attackers to hijack the authentication of users for requests that modify HTML via unspecified vectors related to the "response web page."...