Mcafee Advanced Threat Defense vulnerabilities, page 2
26 vulnerabilities
Known vulnerabilities in Mcafee Advanced Threat Defense, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2019-3643mcafee, llcmcafee web gateway (mwg)+4
EPSS score2.39%
McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, potentially leading to a denial of service. This affects the scanning proxies.CVE-2019-3660mcafeeadvanced_threat_defense+1EPSS score1.20%
Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute commands on the server remotely via carefully constructed HTTP requests.CVE-2019-3661mcafeeadvanced_threat_defense+1EPSS score1.13%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute database commands via carefully constructed time based payloads.CVE-2019-3649mcafeeadvanced_threat_defense+1EPSS score0.92%
Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attackers to gain access to hashed credentials via carefully constructed POST request extracting incorrectly recorded data from log files.CVE-2019-3644mcafee, llcmcafee web gateway (mwg)+4EPSS score2.39%
McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service. This affects the scanning proxies.CVE-2023-0978mcafeeadvanced_threat_defense+2EPSS score0.37%
A command injection vulnerability in Trellix Intelligent Sandbox CLI for version 5.2 and earlier, allows a local user to inject and execute arbitrary operating system commands using specially crafted strings. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI command. The vulnerability allows the attack