Lucene search
K

23 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2015-7169

Malware in sbrugna...

2.1CVSS6.4AI score0.00318EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2018-18442

Malware in sbrugna...

6.1CVSS6.2AI score0.00701EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2017-13024

Malware in sbrugna...

9.8CVSS7.6AI score0.01578EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 3:12 a.m.4 views

CVE-2015-7238

The Secondary server in Threat Intelligence Exchange TIE before 1.2.0 uses weak permissions for unspecified 1 configuration files and 2 installation logs, which allows local users to obtain sensitive information by reading the files...

2.1CVSS6.2AI score0.00318EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/01/20 12:0 a.m.3 views

The vulnerability of the API interface of the Threat Intelligence Exchange Server allows attackers to compromise the integrity of the protected information.

The vulnerability of the Threat Intelligence Exchange Server’s API interface is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor, operating remotely, to compromise the integrity of the protected information through specially crafted...

4.5CVSS5.5AI score0.00747EPSS
Exploits0References3Affected Software1
CNVD
CNVD
added 2019/12/24 12:0 a.m.2 views

McAfee Threat Intelligence Exchange Server Authorization Issues Vulnerability

McAfee TIE Server is a network threat defense server from the U.S. company McAfee McAfee. An authorization issue vulnerability exists in the API in McAfee Threat Intelligence Exchange Server version 3.0.0. The vulnerability stems from a lack of authentication measures or insufficient authenticati...

4.5CVSS7.1AI score0.00747EPSS
Exploits0References1
OSV
OSV
added 2019/11/13 11:15 a.m.4 views

CVE-2019-3641

Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server TIE Server 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages...

4.5CVSS5.8AI score0.00747EPSS
Exploits0References1
NVD
NVD
added 2019/11/13 11:15 a.m.28 views

CVE-2019-3641

Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server TIE Server 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages...

4.5CVSS4.4AI score0.00747EPSS
Exploits0References1
Cvelist
Cvelist
added 2019/11/13 10:35 a.m.28 views

CVE-2019-3641 Exploitation of Authorization in TIE Server

Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server TIE Server 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages...

4.5CVSS4.5AI score0.00747EPSS
Exploits0References1
CVE
CVE
added 2019/11/13 10:35 a.m.52 views

CVE-2019-3641

CVE-2019-3641 affects McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0, where an Abuse of Authorization in the exposed APIs allows remote authenticated users to modify stored reputation data via specially crafted messages. The root cause is an authorization/control weakness in TIE Se...

4.5CVSS4.4AI score0.00747EPSS
Exploits0References1Affected Software1
Symantec
Symantec
added 2019/11/12 12:0 a.m.36 views

McAfee Threat Intelligence Exchange Server CVE-2019-3641 Unauthorized Access Vulnerability

Description McAfee Threat Intelligence Exchange Server is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to gain unauthorized access and perform unauthorized actions. This may aid in further attacks. McAfee Threat Intelligence Exchange Server 3.0.0 is vulnerable...

0.9AI score0.00747EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/05/24 12:0 a.m.5 views

The vulnerability of the Data Exchange Layer Platform, a messaging application between applications, and the Threat Intelligence Exchange Server, related to the lack of protection for operational data, allows access to confidential information.

The vulnerability of the Data Exchange Layer Platform, a messaging application between applications, and the Threat Intelligence Exchange Server, a threat protection system, is related to the lack of protection for operational data. Exploiting this vulnerability can allow attackers to gain access...

8.2CVSS6.5AI score0.0024EPSS
Exploits0References2
OSV
OSV
added 2018/10/03 10:1 p.m.1 views

CVE-2018-6695

SSH host keys generation vulnerability in the server in McAfee Threat Intelligence Exchange Server TIE Server 1.3.0, 2.0.x, 2.1.x, 2.2.0 allows man-in-the-middle attackers to spoof servers via acquiring keys from another environment...

5.9CVSS5.8AI score0.00701EPSS
Exploits0References1
CVE
CVE
added 2018/10/03 9:0 p.m.49 views

CVE-2018-6695

CVE-2018-6695 concerns McAfee Threat Intelligence Exchange Server (TIE Server). It is a SSH host keys generation vulnerability in the TIE Server component that allows man-in-the-middle attackers to spoof servers by acquiring keys from another environment. Affected versions: 1.3.0, 2.0.x, 2.1.x, 2...

6.1CVSS5.7AI score0.00701EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2018/10/03 9:0 p.m.22 views

CVE-2018-6695 Threat Intelligence Exchange Server (TIE Server) SSH host keys generation vulnerability

SSH host keys generation vulnerability in the server in McAfee Threat Intelligence Exchange Server TIE Server 1.3.0, 2.0.x, 2.1.x, 2.2.0 allows man-in-the-middle attackers to spoof servers via acquiring keys from another environment...

6.1CVSS5.6AI score0.00701EPSS
Exploits0References1
CNVD
CNVD
added 2018/06/19 12:0 a.m.3 views

McAfee Threat Intelligence Exchange Server Code Injection Vulnerability

McAfee Threat Intelligence Exchange TIE Server is the United States McAfee McAfee company's set of threat detection and corresponding solutions. The program includes real-time protection, threat detection and endpoint protection. ePolicy Orchestrator ePO extension is one of the security managemen...

9.8CVSS8.1AI score0.01578EPSS
Exploits0References1
OSV
OSV
added 2018/06/13 9:29 p.m.3 views

CVE-2017-3907

Code Injection vulnerability in the ePolicy Orchestrator ePO extension in McAfee Threat Intelligence Exchange TIE Server 2.1.0 and earlier allows remote attackers to execute arbitrary HTML code to be reflected in the response web page via unspecified vector...

9.8CVSS6.1AI score0.01578EPSS
Exploits0References1
Prion
Prion
added 2018/06/13 9:29 p.m.17 views

Code injection

Code Injection vulnerability in the ePolicy Orchestrator ePO extension in McAfee Threat Intelligence Exchange TIE Server 2.1.0 and earlier allows remote attackers to execute arbitrary HTML code to be reflected in the response web page via unspecified vector...

7.5CVSS9.8AI score0.01578EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2018/06/13 9:0 p.m.25 views

CVE-2017-3907 McAfee Threat Intelligence Exchange (TIE) Server - Code Injection vulnerability

Code Injection vulnerability in the ePolicy Orchestrator ePO extension in McAfee Threat Intelligence Exchange TIE Server 2.1.0 and earlier allows remote attackers to execute arbitrary HTML code to be reflected in the response web page via unspecified vector...

5.4CVSS9.9AI score0.01578EPSS
Exploits0References1
CNVD
CNVD
added 2015/09/23 12:0 a.m.3 views

McAfee Threat Intelligence Exchange Secondary Server Information Disclosure Vulnerability

McAfee Threat Intelligence Exchange TIE the United States McAfee McAfee company's set of unified threat defense system to provide security recovery and infection defense capabilities. The system provides comprehensive threat intelligence awareness, instant understanding of the trails of advanced...

2.1CVSS6.4AI score0.00318EPSS
Exploits0References1
Rows per page
Query Builder