Mcafee, LLC Endpoint Security (Ens) For Windows vulnerabilities

5 vulnerabilities

Known vulnerabilities in Mcafee, LLC Endpoint Security (Ens) For Windows, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.8CVE-2021-23881mcafee llcendpoint security (ens) for windows+1
EPSS score
0.64%
A stored cross site scripting vulnerability in ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 February 2021 Update allows an ENS ePO administrator to add a script to a policy event which will trigger the script to be run through a browser block page when a local non-administrator user triggers the policy.4.9CVE-2021-23883mcafee llcendpoint security (ens) for windows+1
EPSS score
0.27%
A Null Pointer Dereference vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows a local administrator to cause Windows to crash via a specific system call which is not handled correctly. This varies by machine and had partial protection prior to this update.7.3CVE-2021-23878mcafee llcendpoint security (ens) for windows+1
EPSS score
0.62%
Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows a local user to view ENS settings and credentials via accessing process memory after the ENS administrator has performed specific actions. To exploit this, the local user has to access the relevant memory location immediately after an ENS administrator has made a configuration change through the console on their machine6.7CVE-2021-23880mcafee llcendpoint security (ens) for windows+1
EPSS score
0.29%
Improper Access Control in attribute in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrator user to perform an uninstallation of the anti-malware engine via the running of a specific command with the correct parameters.8.2CVE-2021-23882mcafee llcendpoint security (ens) for windows+1
EPSS score
0.29%
Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows local administrators to prevent the installation of some ENS files by placing carefully crafted files where ENS will be installed. This is only applicable to clean installations of ENS as the Access Control rules will prevent modification prior to up an upgrade.