Mcafee Enterprise Security Manager vulnerabilities
9 vulnerabilities
Known vulnerabilities in Mcafee Enterprise Security Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2015-7704citrixxenserver+20
EPSS score10.66%
The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages.CVE-2015-7310mcafeeenterprise_security_manager+2EPSS score1.13%
McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enterprise Security Manager/Receiver (ESMREC) before 9.3.2MR18, 9.4.x before 9.4.2MR8, and 9.5.x before 9.5.0MR7 allow remote authenticated users to execute arbitrary OS commands via a crafted filename, which is not properly handled when downloading the file.CVE-2019-3631mcafee, llcmcafee enterprise security manager (esm)+1EPSS score2.01%
Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary code via specially crafted parameters.CVE-2019-3630mcafee, llcmcafee enterprise security manager (esm)+1EPSS score2.01%
Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary code via specially crafted parameters.CVE-2019-3643mcafee, llcmcafee web gateway (mwg)+4EPSS score2.39%
McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, potentially leading to a denial of service. This affects the scanning proxies.CVE-2019-3644mcafee, llcmcafee web gateway (mwg)+4EPSS score2.39%
McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service. This affects the scanning proxies.CVE-2019-3628mcafee, llcmcafee enterprise security manager (esm)+1EPSS score0.96%
Privilege escalation in McAfee Enterprise Security Manager (ESM) 11.x prior to 11.2.0 allows authenticated user to gain access to a core system component via incorrect access control.CVE-2019-3629mcafee, llcmcafee enterprise security manager (esm)+1EPSS score1.22%
Application protection bypass vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows unauthenticated user to impersonate system users via specially crafted parameters.CVE-2019-3632mcafee, llcmcafee enterprise security manager (esm)+1EPSS score1.68%
Directory Traversal vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to gain elevated privileges via specially crafted input.