Agent (Mcafee) - vulnerabilities (CVEs)
25 CVEs, 0 in the last 30 days, 74 known versions, newest CVE from 2022-07-27. Vendor: Mcafee.
CVEs of Agent
- CVE-2022-2313 - CVSS 8.2 (high), 2022-07-27: A DLL hijacking vulnerability in the MA Smart Installer for Windows prior to 5.7.7, which allows local users to execute arbitrary code and obtain higher…
- CVE-2022-1258 - CVSS 8.4 (high), 2022-04-14: A blind SQL injection vulnerability in the ePolicy Orchestrator (ePO) extension of MA prior to 5.7.6 can be exploited by an authenticated administrator on ePO…
- CVE-2022-1257 - CVSS 6.1 (medium), 2022-04-14: Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a local user to gain access to sensitive…
- CVE-2022-1256 - CVSS 7.8 (high), 2022-04-14: A local privilege escalation vulnerability in MA for Windows prior to 5.7.6 allows a local low privileged user to gain system privileges through running the…
- CVE-2022-0166 - CVSS 7.8 (high), 2022-01-19: A privilege escalation vulnerability in the McAfee Agent prior to 5.7.5. McAfee Agent uses openssl.cnf during the build process to specify the OPENSSLDIR…
- CVE-2021-31854 - CVSS 7.8 (high), 2022-01-19: A command Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.7.5 allows local users to inject arbitrary shell code into the file cleanup.exe.…
- CVE-2021-31847 - CVSS 8.2 (high), 2021-09-22: Improper access control vulnerability in the repair process for McAfee Agent for Windows prior to 5.7.4 could allow a local attacker to perform a DLL…
- CVE-2021-31839 - CVSS 4.8 (medium), 2021-06-10: Improper privilege management vulnerability in McAfee Agent for Windows prior to 5.7.3 allows a local user to modify event information in the MA event folder.…
- CVE-2021-1257 - CVSS 8.8 (high), 2021-01-20: A vulnerability in the web-based management interface of Cisco DNA Center Software could allow an unauthenticated, remote attacker to conduct a cross-site…
- CVE-2020-7343 - CVSS 5.5 (medium), 2021-01-18: Missing Authorization vulnerability in McAfee Agent (MA) for Windows prior to 5.7.1 allows local users to block McAfee product updates by manipulating a…
- CVE-2019-3613 - CVSS 7.3 (high), 2020-06-10: DLL Search Order Hijacking vulnerability in McAfee Agent (MA) prior to 5.6.4 allows attackers with local access to execute arbitrary code via execution from a…
- CVE-2020-7253 - CVSS 5.7 (medium), 2020-03-12: Improper access control vulnerability in masvc.exe in McAfee Agent (MA) prior to 5.6.4 allows local users with administrator privileges to disable…
- CVE-2019-3592 - CVSS 7.2 (high), 2019-07-18: Privilege escalation vulnerability in McAfee Agent (MA) before 5.6.1 HF3, allows local administrator users to potentially disable some McAfee processes by…
- CVE-2019-3598 - CVSS 5.3 (medium), 2019-02-28: Buffer Access with Incorrect Length Value in McAfee Agent (MA) 5.x allows remote unauthenticated users to potentially cause a denial of service via…
- CVE-2019-3599 - CVSS 7.5 (high), 2019-02-28: Information Disclosure vulnerability in Remote logging (which is disabled by default) in McAfee Agent (MA) 5.x allows remote unauthenticated users to access…
- CVE-2019-1559 - CVSS 5.9 (medium), 2019-02-27: If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL…
- CVE-2018-6707 - CVSS 7 (high), 2018-12-14: Denial of Service through Resource Depletion vulnerability in the agent in non-Windows McAfee Agent (MA) 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local…
- CVE-2018-6706 - CVSS 7.5 (high), 2018-12-12: Insecure handling of temporary files in non-Windows McAfee Agent 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows an Unprivileged User to introduce custom paths…
- CVE-2018-6705 - CVSS 7.8 (high), 2018-12-12: Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command…
- CVE-2018-6704 - CVSS 7.8 (high), 2018-12-12: Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command…
- CVE-2018-6703 - CVSS 9.8 (critical), 2018-12-11: Use After Free in Remote logging (which is disabled by default) in McAfee McAfee Agent (MA) 5.x prior to 5.6.0 allows remote unauthenticated attackers to…
- CVE-2015-8987 - CVSS 5.3 (medium), 2017-03-14: Man-in-the-middle (MitM) attack vulnerability in non-Mac OS agents in McAfee (now Intel Security) Agent (MA) 4.8.0 patch 2 and earlier allows attackers to…
- CVE-2016-3984 - CVSS 5.1 (medium), 2016-04-08: The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161, Agent (MA) 5.x before 5.0.2 Hotfix 1110392 (5.0.2.333), Data…
- CVE-2013-3627 - CVSS 5 (medium), 2013-10-05: FrameworkService.exe in McAfee Framework Service in McAfee Managed Agent (MA) before 4.5.0.1927 and 4.6 before 4.6.0.3258 allows remote attackers to cause a…
- CVE-2008-1357 - CVSS 5.4 (medium), 2008-03-17: Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (Patch 3) and earlier, as used in…
