McAfee,LLC vulnerabilities
82 published CVEs name McAfee,LLC among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 82
- Last 12 months
- 0
- Critical
- 3
- Known exploited
- 1
Critical 3High 44Medium 31Low 4Not scored 0
CVEs per yearBy the year they were published
- 20192
- 202021
- 202142
- 202217
Known exploitedNewest addition to KEV first
- CVE-2021-23874
McAfee Total Protection (MTP) privilege escalation vulnerability
McAfee,LLC · McAfee Total Protection (MTP)
ExploitedHigh8.2
Newest CVEs
- CVE-2022-1823
McAfee MCPR privilege escalation
McAfee,LLC · McAfee Consumer Product Removal Tool
High7.9 - CVE-2022-1824
McAfee MCPR privilege escalation
McAfee,LLC · McAfee Consumer Product Removal Tool
High7.9 - CVE-2022-1254
SWG URL redirection vulnerability
McAfee,LLC · Secure Web Gateway
Medium6.1 - CVE-2022-1257
Improper Verification of Cryptographic Signature by McAfee Agent
McAfee,LLC · McAfee Agent
Medium6.1 - CVE-2022-1258
SQL injection vulnerability in McAfee Agent's ePO extension
McAfee,LLC · McAfee Agent ePO extension
High8.4 - CVE-2022-1256
Improper Privilege Management in McAfee Agent for Windows
McAfee,LLC · McAfee Agent for Windows
High7.8 - CVE-2022-0861
ePO XML extended entity vulnerability
McAfee,LLC · McAfee ePolicy Orchestrator (ePO)
Low3.5 - CVE-2022-0862
ePO password change vulnerability
McAfee,LLC · McAfee ePolicy Orchestrator (ePO)
Low3.1 - CVE-2022-0858
Cross-site scripting vulnerability in ePO
McAfee,LLC · McAfee ePolicy Orchestrator (ePO)
Medium4.3 - CVE-2022-0859
ePO database restoration vulnerability
McAfee,LLC · McAfee ePolicy Orchestrator (ePO)
Medium6.5
Products with the most CVEs
- McAfee ePolicy Orchestrator (ePO)11
- McAfee Total Protection (MTP)9
- McAfee Agent for Windows8
- McAfee Database Security (DBSec)6
- McAfee Data Loss Prevention (DLP) Endpoint for Windows5
- McAfee Endpoint Security (ENS) for Windows4
- McAfee Advanced Threat Defense (ATD)2
- McAfee Application and Change Control (MACC)2
- McAfee Consumer Product Removal Tool2
- McAfee Drive Encryption (MDE)2
Most common weaknesses
- CWE-269 Improper privilege management29
- CWE-274 12
- CWE-79 Cross-site scripting (XSS)10
- CWE-59 Link following7
- CWE-427 Uncontrolled search path element6
- CWE-200 Exposure of sensitive information3
- CWE-319 Cleartext transmission of sensitive information3
- CWE-522 3
- CWE-89 SQL injection3
- CWE-120 Classic buffer overflow2