McAfee
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| DLP ePO extension | 6 | – | Aug 13, 2020 |
| McAfee Web Gateway (MWG) | 6 | – | Sep 15, 2020 |
| Network Security Management (NSM) | 4 | – | Jan 5, 2021 |
| Data Loss Prevention (DLP) ePO extension | 2 | – | Nov 1, 2021 |
| Data Loss Prevention(DLP) | 2 | – | Aug 13, 2020 |
| ePolicy Orchistrator (ePO) | 2 | – | Oct 14, 2020 |
| McAfee Total Protection (MTP) | 2 | – | Oct 26, 2021 |
| McAfee Total Protection for Windows | 1 | – | Mar 10, 2022 |
| Database Security | 1 | – | Dec 9, 2020 |
| File & Removable Media Protection (FRP) | 1 | – | Oct 7, 2020 |
| McAfee WebAdvisor | 1 | – | Mar 10, 2022 |
| McAfee Email Gateway (MEG) | 1 | – | Sep 16, 2020 |
Exploited and recent CVEs
- CVE-2022-0280 McAfee Total Protection (MTP) - File Deletion vulnerability 0.3%
- CVE-2022-0815 McAfee WebAdvisor - Extension Fingerprinting vulnerability 1.0%
- CVE-2021-31848 Data Loss Prevention (DLP) ePO extension - Cross site scripting (XSS) 0.8%
- CVE-2021-31849 Data Loss Prevention (DLP) ePO extension - SQL injection 1.1%
- CVE-2021-23877 McAfee Total Protection (MTP) - Privilege Escalation vulnerability 0.4%
- CVE-2020-7336 Network Security Management (NSM) - Cross Site Request Forgery vulnerability 0.5%
- CVE-2020-7339 Database Security(DBS)-Use of a Broken or Risky Cryptographic Algorithm 0.2%
- CVE-2020-7317 ePolicy Orchistrator (ePO) - Cross-Site Scripting vulnerability 0.3%
- CVE-2020-7318 ePolicy Orchistrator (ePO) - Cross-Site Scripting vulnerability 1.0%
- CVE-2020-7316 File and Removable Media Protection update fixes one vulnerability 0.4%
- CVE-2020-7268 McAfee Email Gateway (MEG) - Path Traversal vulnerability 1.0%
- CVE-2020-7297 Web Gateway (MWG) - Privilege Escalation vulnerability 0.4%
- CVE-2020-7296 Web Gateway (MWG) - Privilege Escalation vulnerability 0.4%
- CVE-2020-7295 Web Gateway (MWG) - Privilege Escalation vulnerability 0.5%
- CVE-2020-7294 Web Gateway (MWG) - Privilege Escalation vulnerability 0.4%
- CVE-2020-7293 Web Gateway (MWG) - Privilege Escalation vulnerability 0.7%
- CVE-2020-7307 DLP for Mac - Unprotected Storage of Credentials 0.3%
- CVE-2020-7306 DLP for Mac - Unprotected Storage of Credentials 0.2%
- CVE-2020-7305 DLP ePO extension - Privilege escalation 1.0%
- CVE-2020-7304 DLP ePO extension - Cross-site request forgery 0.5%
- CVE-2020-7303 DLP ePO extension - Cross-site scripting 0.4%
- CVE-2020-7302 DLP ePO extension - Unrestricted Upload of File with Dangerous Type 0.7%
- CVE-2020-7301 DLP ePO extension - Cross site scripting 0.5%
- CVE-2020-7300 DLP ePO extension - Improper Authorization 0.6%
- CVE-2020-7298 Total Protection (MTP) - Unexpected behavior violation 0.3%
- CVE-2020-7292 Web Gateway (MWG) - Inappropriate Encoding for output context 0.9%
- CVE-2020-7284 Network Security Management (NSM) - Exposure of Sensitive Information 0.4%
- CVE-2020-7256 Network Security Management (NSM) - Cross site scripting vulnerability 0.5%
- CVE-2020-7258 Network Security Management (NSM) - Cross site scripting vulnerability 0.5%