Mcafee : Security Vulnerabilities (CVSS score between 1 and 1.99)
# |
CVE ID
|
CWE ID
|
# of Exploits
|
Vulnerability Type(s)
|
Publish Date
|
Update Date
|
Score
|
Gained Access Level
|
Access
|
Complexity
|
Authentication
|
Conf.
|
Integ.
|
Avail.
|
1 |
CVE-2016-8006 |
264 |
|
Bypass |
2017-01-05 |
2017-01-17 |
1.7 |
None |
Local |
Low |
Single system |
None |
Partial |
None |
Authentication bypass vulnerability in Enterprise Security Manager (ESM) and License Manager (LM) in Intel Security McAfee Security Information and Event Management (SIEM) 9.6.0 MR3 allows an administrator to make changes to other SIEM users' information including user passwords without supplying the current administrator password a second time via the GUI or GUI terminal commands. |
2 |
CVE-2009-5117 |
200 |
|
+Info |
2012-08-22 |
2017-08-28 |
1.9 |
None |
Local |
Medium |
Not required |
Partial |
None |
None |
The Web Post Protection feature in McAfee Host Data Loss Prevention (DLP) 3.x before 3.0.100.10 and 9.x before 9.0.0.422, when HTTP Capture mode is enabled, allows local users to obtain sensitive information from web traffic by reading unspecified files. |
3 |
CVE-2005-2186 |
|
|
XSS |
2005-07-11 |
2016-10-17 |
1.9 |
None |
Local |
Medium |
Not required |
None |
Partial |
None |
Multiple cross-site scripting (XSS) vulnerabilities in McAfee IntruShield Security Management System allow remote authenticated users to inject arbitrary web script or HTML via the (1) thirdMenuName or (2) resourceName parameter to SystemEvent.jsp. |
Total number of vulnerabilities :
3
Page :
1
(This Page)