Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mcafee data loss prevention endpoint vulnerabilities and exploits
(subscribe to this query)
7.2
CVSSv2
CVE-2021-23887
Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows before 11.6.100 allows a local, low privileged, malicious user to write to arbitrary controlled kernel addresses. This is achieved by launching applications, suspending them, modifying th...
Mcafee Data Loss Prevention Endpoint
6.9
CVSSv2
CVE-2015-1305
McAfee Data Loss Prevention Endpoint (DLPe) prior to 9.3.400 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted (1) 0x00224014 or (2) 0x0022c018 IOCTL call.
Mcafee Data Loss Prevention Endpoint
1 EDB exploit
6.8
CVSSv2
CVE-2015-2759
Multiple cross-site request forgery (CSRF) vulnerabilities in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) prior to 9.3 Patch 4 Hotfix 16 (9.3.416.4) allow remote malicious users to hijack the authentication of users for requests that (1) obtain sensitive info...
Mcafee Data Loss Prevention Endpoint
6.5
CVSSv2
CVE-2021-31849
SQL injection vulnerability in McAfee Data Loss Prevention (DLP) ePO extension before 11.7.100 allows a remote attacker logged into ePO as an administrator to inject arbitrary SQL into the ePO database through the user management section of the DLP ePO extension.
Mcafee Data Loss Prevention Endpoint
6.5
CVSSv2
CVE-2018-6664
Application Protections Bypass vulnerability in Microsoft Windows in McAfee Data Loss Prevention (DLP) Endpoint prior to 10.0.500 and DLP Endpoint prior to 11.0.400 allows authenticated users to bypass the product block action via a command-line utility.
Mcafee Data Loss Prevention Endpoint
6.5
CVSSv2
CVE-2015-2758
The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) prior to 9.3 Patch 4 Hotfix 16 (9.3.416.4) allows remote authenticated users to obtain sensitive information, modify the database, or possibly have other unspecified impact via a crafted URL.
Mcafee Data Loss Prevention Endpoint
6.5
CVSSv2
CVE-2015-1616
SQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) prior to 9.3.400 allows remote authenticated ePO users to execute arbitrary SQL commands via unspecified vectors.
Mcafee Data Loss Prevention Endpoint
4.9
CVSSv2
CVE-2021-23886
Denial of Service vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows before 11.6.100 allows a local, low privileged, malicious user to cause a BSoD through suspending a process, modifying the processes memory and restarting it. This is triggered by the hdlpho...
Mcafee Data Loss Prevention Endpoint
4.6
CVSSv2
CVE-2021-31844
A buffer overflow vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows before 11.6.200 allows a local malicious user to execute arbitrary code with elevated privileges through placing carefully constructed Ami Pro (.sam) files onto the local system and triggeri...
Mcafee Data Loss Prevention Endpoint
4.6
CVSSv2
CVE-2018-6689
Authentication Bypass vulnerability in McAfee Data Loss Prevention Endpoint (DLPe) 10.0.x earlier than 10.0.510, and 11.0.x earlier than 11.0.600 allows malicious users to bypass local security protection via specific conditions.
Mcafee Data Loss Prevention Endpoint
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-29895
inject
CVE-2023-52689
CVE-2024-5049
CVE-2024-5051
privilege escalation
physical
CVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »