Latest mcafee agent Vulnerabilities

● CVE-2022-2313

A DLL hijacking vulnerability in the MA Smart Installer for Windows prior to 5.7.7, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious...

Mcafee Agent<5.7.7

● CVE-2022-1257

Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a local user to gain access to sensitive information through storage in ma.db. The sen...

Mcafee Agent<5.7.6

● CVE-2022-1258

A blind SQL injection vulnerability in the ePolicy Orchestrator (ePO) extension of MA prior to 5.7.6 can be exploited by an authenticated administrator on ePO to perform arbitrary SQL queries in the b...

Mcafee Agent<5.7.6

McAfee ePolicy Orchestrator

● CVE-2022-1256

A local privilege escalation vulnerability in MA for Windows prior to 5.7.6 allows a local low privileged user to gain system privileges through running the repair functionality. Temporary file action...

Mcafee Agent<5.7.6

● CVE-2022-0166

A privilege escalation vulnerability in the McAfee Agent prior to 5.7.5. McAfee Agent uses openssl.cnf during the build process to specify the OPENSSLDIR variable as a subdirectory within the installa...

Mcafee Agent<5.7.5

● CVE-2021-31854

A command Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.7.5 allows local users to inject arbitrary shell code into the file cleanup.exe. The malicious clean.exe file is placed in...

Mcafee Agent<5.7.5

● CVE-2021-31847

McAfee Endpoint Security Incorrect Permission Assignment Privilege Escalation Vulnerability

Mcafee Mcafee Agent<5.7.4

Mcafee Endpoint Security

Mcafee Agent<5.7.4

● CVE-2021-31839

Improper privilege management vulnerability in McAfee Agent for Windows prior to 5.7.3 allows a local user to modify event information in the MA event folder. This allows a local user to either add fa...

Mcafee Agent>=5.0.0<5.7.3

● CVE-2021-1257

A vulnerability in the web-based management interface of Cisco DNA Center Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to manipulate a...

Cisco DNA Center<2.1.1.0

Mcafee Agent<5.7.6

Apple macOS

Linux Linux kernel

and 1 more

● CVE-2019-3613

DLL Search Order Hijacking vulnerability in McAfee Agent (MA) prior to 5.6.4 allows attackers with local access to execute arbitrary code via execution from a compromised folder.

Mcafee Agent>=5.0.0<5.0.6

Mcafee Agent>=5.5.0<5.5.4

Mcafee Agent>=5.6.0<5.6.4

● CVE-2020-7253

Improper access control vulnerability in masvc.exe in McAfee Agent (MA) prior to 5.6.4 allows local users with administrator privileges to disable self-protection via a McAfee supplied command-line ut...

Mcafee Agent>=5.5.0<5.5.4

Mcafee Agent>=5.6.0<5.6.4

● CVE-2019-3592

Mcafee Agent>=5.0.0<=5.6.1

● CVE-2019-3599

Information Disclosure vulnerability in Remote logging (which is disabled by default) in McAfee Agent (MA) 5.x allows remote unauthenticated users to access sensitive information via remote logging wh...

Mcafee Agent>=5.0.0<=5.0.6

Mcafee Agent>=5.5.0<=5.5.2

Mcafee Agent=5.6.0

● CVE-2019-3598

Mcafee Agent>=5.0.0<=5.0.6

Mcafee Agent>=5.5.0<=5.5.2

Mcafee Agent=5.6.0

● CVE-2019-1559

OpenSSL could allow a remote attacker to obtain sensitive information, caused by the failure to immediately close the TCP connection after the hosts encounter a zero-length record with valid padding. ...

redhat/openssl<0:1.0.1e-58.el6_10

redhat/openssl<1:1.0.2k-19.el7

redhat/jws5-ecj<0:4.12.0-1.redhat_1.1.el6

redhat/jws5-javapackages-tools<0:3.4.1-5.15.11.el6

redhat/jws5-jboss-logging<0:3.3.2-1.Final_redhat_00001.1.el6

redhat/jws5-tomcat<0:9.0.21-10.redhat_4.1.el6

and 226 more

● CVE-2018-6707

Denial of Service through Resource Depletion vulnerability in the agent in non-Windows McAfee Agent (MA) 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to cause DoS, unexpected behavior, or ...

Mcafee Agent>=5.0.0<=5.0.6

Mcafee Agent=5.5.0

Mcafee Agent=5.5.1

● CVE-2018-6706

Insecure handling of temporary files in non-Windows McAfee Agent 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows an Unprivileged User to introduce custom paths during agent installation in Linux via unsp...

Mcafee Agent>=5.0.0<=5.0.6

Mcafee Agent=5.5.0

Mcafee Agent=5.5.1

● CVE-2018-6705

Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command execution via specific conditions.

Mcafee Agent>=5.0.0<=5.0.6

Mcafee Agent=5.5.0

Mcafee Agent=5.5.1

● CVE-2018-6704

Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command execution via specific conditions.

Mcafee Agent>=5.0.0<=5.0.6

Mcafee Agent=5.5.0

Mcafee Agent=5.5.1

● CVE-2018-6703

Use After Free in Remote logging (which is disabled by default) in McAfee McAfee Agent (MA) 5.x prior to 5.6.0 allows remote unauthenticated attackers to cause a Denial of Service and potentially a re...

Mcafee Agent>=5.0.0<5.6.0

Latest mcafee agent Vulnerabilities

Company

Resources

Contact