Advisories · Technology

Mcafee, LLC Endpoint Security for Windows.

Every CVE that names Mcafee, LLC Endpoint Security for Windows among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-7333 CVE record

CVSS 4.8 Medium

Cross-site Scripting (XSS) in firewall ePO extension of McAfee Endpoint Security (ENS)
- Mcafee, LLC Endpoint Security for Windows
- Cross-site scripting (XSS)
Not analysed yet 12 Nov 2020
CVE-2020-7332 CVE record

CVSS 7.0 High

Cross-Site Request Forgery (CSRF) in firewall ePO extension of McAfee Endpoint Security (ENS)
- Mcafee, LLC Endpoint Security for Windows
- Cross-site request forgery (CSRF)
Not analysed yet 12 Nov 2020
CVE-2020-7323 CVE record

CVSS 6.9 Medium

Authentication Protection Bypass vulnerability in ENS for Windows
- McAfee LLC Endpoint Security for Windows
- Authentication bypass
Not analysed yet 9 Sept 2020
CVE-2020-7322 CVE record

CVSS 4.7 Medium

Exposure of Sensitive Information in ENS for Windows
- McAfee LLC Endpoint Security for Windows
- Information disclosure
Not analysed yet 9 Sept 2020
CVE-2020-7319 CVE record

CVSS 8.8 High

Improper Access Control Vulnerability in ENS for Windows
- McAfee LLC Endpoint Security for Windows
- Path traversal
Not analysed yet 9 Sept 2020
CVE-2020-7320 CVE record

CVSS 6.7 Medium

Protection Mechanism Failure in ENS for Windows
- McAfee LLC Endpoint Security for Windows
- CWE-693
Not analysed yet 9 Sept 2020