Back
CVE-2018-6664
SB10233 - Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 - Application Protections Bypass vulnerability
Medium5.8EPSS 0.70%
- Published
- Updated
- Reserved
- Assigned by
- trellix
Description
Application Protections Bypass vulnerability in Microsoft Windows in McAfee Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 allows authenticated users to bypass the product block action via a command-line utility.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| trellixCNA (assigner) | 3.0 | Medium5.8 | CVSS:3.0/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:H |
| NVDNVD · Modified | 3.0 | High8.8 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.70% · top 47% of all CVEs (4 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.8.
Weakness
- Application Protection Bypass vulnerability
- CWE-347 (opens in a new tab)All about CWE-347 and its CVEs
Affected products
McAfee · Data Loss Prevention (DLP) Endpoint
- affected 10 – < 10.0.500
McAfee · Data Loss Prevention (DLP) Endpoint
- affected 11 – < 11.0.400
References (3)
- 104299 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- 1040895 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
- https://kc.mcafee.com/corporate/index?page=content&id=SB10237 (opens in a new tab)x_refsource_CONFIRMx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2018-6664)Record last updated .