Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mcafee mcafee agent vulnerabilities and exploits
(subscribe to this query)
2.1
CVSSv2
CVE-2022-1257
Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows before 5.7.6 allows a local user to gain access to sensitive information through storage in ma.db. The sensitive information has been moved to encrypted database files.
Mcafee Agent
7.5
CVSSv2
CVE-2018-6703
Use After Free in Remote logging (which is disabled by default) in McAfee McAfee Agent (MA) 5.x before 5.6.0 allows remote unauthenticated malicious users to cause a Denial of Service and potentially a remote code execution via a specially crafted HTTP header sent to the logging ...
Mcafee Agent
2.1
CVSSv2
CVE-2020-7253
Improper access control vulnerability in masvc.exe in McAfee Agent (MA) before 5.6.4 allows local users with administrator privileges to disable self-protection via a McAfee supplied command-line utility.
Mcafee Agent
3.5
CVSSv2
CVE-2015-8987
Man-in-the-middle (MitM) attack vulnerability in non-Mac OS agents in McAfee (now Intel Security) Agent (MA) 4.8.0 patch 2 and previous versions allows malicious users to make a McAfee Agent talk with another, possibly rogue, ePO server via McAfee Agent migration to another ePO s...
Mcafee Agent
2.1
CVSSv2
CVE-2020-7343
Missing Authorization vulnerability in McAfee Agent (MA) for Windows before 5.7.1 allows local users to block McAfee product updates by manipulating a directory used by MA for temporary files. The product would continue to function with out-of-date detection files.
Mcafee Agent
5
CVSSv2
CVE-2013-3627
FrameworkService.exe in McAfee Framework Service in McAfee Managed Agent (MA) prior to 4.5.0.1927 and 4.6 prior to 4.6.0.3258 allows remote malicious users to cause a denial of service (service crash) via a malformed HTTP request.
Mcafee Agent
6
CVSSv2
CVE-2022-1258
A blind SQL injection vulnerability in the ePolicy Orchestrator (ePO) extension of MA before 5.7.6 can be exploited by an authenticated administrator on ePO to perform arbitrary SQL queries in the back-end database, potentially leading to command execution on the server.
Mcafee Agent
7.2
CVSSv2
CVE-2022-1256
A local privilege escalation vulnerability in MA for Windows before 5.7.6 allows a local low privileged user to gain system privileges through running the repair functionality. Temporary file actions were performed on the local user's %TEMP% directory with System privileges ...
Mcafee Agent
NA
CVE-2022-2313
A DLL hijacking vulnerability in the MA Smart Installer for Windows before 5.7.7, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL into the folder from where the Smart installer is being executed.
Mcafee Agent
7.2
CVSSv2
CVE-2022-0166
A privilege escalation vulnerability in the McAfee Agent before 5.7.5. McAfee Agent uses openssl.cnf during the build process to specify the OPENSSLDIR variable as a subdirectory within the installation directory. A low privilege user could have created subdirectories and execute...
Mcafee Agent
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4644
unprivileged
CVE-2024-3494
CVE-2024-22460
CVE-2024-26026
CVE-2024-23473
firewall
CVE-2024-28889
XML external entity
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »