CVE-2009-5118: Undefined Security Weakness

Untrusted search path vulnerability in McAfee VirusScan Enterprise before 8.7i allows local users to gain privileges via a Trojan horse DLL in an unspecified directory, as demonstrated by scanning a document located on a remote share...

PT-2012-1283

Name of the Vulnerable Software and Affected Versions McAfee VirusScan Enterprise versions prior to 8.7i Description The issue allows local users to gain privileges through a Trojan horse DLL in an unspecified directory. This can be demonstrated by scanning a document located on a remote share...

PT-2012-5506

Name of the Vulnerable Software and Affected Versions McAfee Virtual Technician versions prior to 6.4 ePO-MVT versions prior to 6.4 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, such as an Internet Explorer crash, via a crafted web site. Thi...

PT-2012-1281

Name of the Vulnerable Software and Affected Versions McAfee LinuxShield versions 1.5.1 and earlier Description The issue is related to improper implementation of client authentication, allowing remote authenticated users to gain Admin access to the statistics server by leveraging a client accoun...

CVE-2012-4595: Improper Authentication

McAfee Email and Web Security EWS 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway MEG 7.0.0 and 7.0.1, allows remote attackers to bypass authentication and obtain an admin session ID via unspecified vectors...

PT-2012-5494

Name of the Vulnerable Software and Affected Versions McAfee Email and Web Security EWS versions 5.x through 5.5 before Patch 6 McAfee Email and Web Security EWS version 5.6 before Patch 3 McAfee Email Gateway MEG version 7.0 before Patch 1 Description The issue allows remote authenticated users ...

CVE-2011-5101: Undefined Security Weakness

The Rumor technology in McAfee SaaS Endpoint Protection before 5.2.4 allows remote attackers to relay e-mail messages via unspecified vectors, as demonstrated by relaying spam...

CVE-2012-4580: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in McAfee Email and Web Security EWS 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway MEG 7.0 before Patch 1, allows remote attackers to inject arbitrary web script or HTML via vectors related to the McAfee Security Appliance Managemen...

PT-2012-5498

Name of the Vulnerable Software and Affected Versions McAfee Enterprise Mobility Manager EMM versions prior to 10.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the About.aspx page of the Portal in McAfee Enterprise Mobility Manager EMM. These vulnerabilitie...

PT-2012-5492

Name of the Vulnerable Software and Affected Versions McAfee Email and Web Security EWS versions 5.x through 5.5 before Patch 6 McAfee Email and Web Security EWS version 5.6 before Patch 3 McAfee Email Gateway MEG version 7.0 before Patch 1 Description The issue allows remote authenticated users ...

PT-2012-1280

Name of the Vulnerable Software and Affected Versions McAfee Common Management Agent CMA versions 3.5.5 through 3.5.5.588 McAfee Common Management Agent CMA versions 3.6.0 through 3.6.0.608 McAfee Agent versions prior to 4.0 Patch 3 Description The issue allows remote authenticated users to...

CVE-2012-4594: Undefined Security Weakness

McAfee ePolicy Orchestrator ePO 4.6.1 and earlier allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information from arbitrary reporting panels, via a modified ID value in a console URL...

CVE-2009-5117: Exposure of Sensitive Information to an Unauthorized Actor

The Web Post Protection feature in McAfee Host Data Loss Prevention DLP 3.x before 3.0.100.10 and 9.x before 9.0.0.422, when HTTP Capture mode is enabled, allows local users to obtain sensitive information from web traffic by reading unspecified files...

CVE-2012-4599: Improper Authentication

McAfee SmartFilter Administration, and SmartFilter Administration Bess Edition, before 4.2.1.01 does not require authentication for access to the JBoss Remote Method Invocation RMI interface, which allows remote attackers to execute arbitrary code via a crafted .war file...

PT-2012-5502

Name of the Vulnerable Software and Affected Versions McAfee ePolicy Orchestrator ePO versions 4.6.1 and earlier Description The issue allows remote authenticated users to bypass intended access restrictions and obtain sensitive information from arbitrary reporting panels. This is achieved by...

PT-2012-5496

Name of the Vulnerable Software and Affected Versions McAfee Enterprise Mobility Manager EMM Agent versions prior to 4.8 McAfee Enterprise Mobility Manager EMM Server versions prior to 10.1 Description The issue allows remote attackers to cause a denial of service by making a long sequence of log...

PT-2012-5500

Name of the Vulnerable Software and Affected Versions McAfee Enterprise Mobility Manager EMM versions prior to 10.0 Description The issue concerns the Portal in McAfee Enterprise Mobility Manager EMM where the secure flag for the ASP.NET session cookie is not set in an https session. This makes i...

CVE-2011-5100: Improper Authentication

The web interface in McAfee Firewall Reporter before 5.1.0.13 does not properly implement cookie authentication, which allows remote attackers to obtain access, and disable anti-virus functionality, via an HTTP request...

CVE-2012-4598: Undefined Security Weakness

An unspecified ActiveX control in McAfee Virtual Technician MVT before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code or cause a denial of service Internet Explorer crash via a crafted web site...

CVE-2012-4583: Exposure of Sensitive Information to an Unauthorized Actor

McAfee Email and Web Security EWS 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway MEG 7.0 before Patch 1, allows remote authenticated users to obtain the session tokens of arbitrary users by navigating within the Dashboard...