GCVE - cpe:2.3:a:mcafee:saas_endpoint_protection:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:saas_endpoint_protection:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Mcafee (`b3716737-1d68-5e90-9de7-ce927cce9af4`)
Product	Saas Endpoint Protection (`56601e48-aa6d-5780-885f-ba4ad069b7f9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-5101`	vulnerable	2026-06-08 04:59:34.624912	Details available The Rumor technology in McAfee SaaS Endpoint Protection before 5.2.4 allows remote attackers to relay e-mail messages via unspecified vectors, as demonstrated by relaying spam. Published: 2012-08-22T10:00:00.000Z Updated: 2024-08-07T00:23:40.136Z Open on db.gcve.eu Reference links https://kc.mcafee.com/corporate/index?page=content&id=SB10018 https://exchange.xforce.ibmcloud.com/vulnerabilities/78274	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3007`	vulnerable	2026-06-08 04:58:10.284746	Details available The myCIOScn ActiveX control (myCIOScn.dll) in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to write to arbitrary files by specifying an arbitrary filename in the MyCioScan.Scan.ReportFile parameter, as demonstrated by injecting script into a log file and executing arbitrary code using the MyCioScan.Scan.Start method. Published: 2011-08-10T20:00:00.000Z Updated: 2024-08-06T23:22:26.990Z Open on db.gcve.eu Reference links https://kc.mcafee.com/corporate/index?page=content&id=SB10016 https://exchange.xforce.ibmcloud.com/vulnerabilities/69093 http://osvdb.org/74513 http://dvlabs.tippingpoint.com/advisory/TPTI-11-13	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3006`	vulnerable	2026-06-08 04:58:10.284188	Details available The MyAsUtil ActiveX control in MyAsUtil5.2.0.603.dll in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to bypass the MyASUtil.SecureObjectFactory.CreateSecureObject domain execution policy using a cross-site scripting (XSS) attack, execute arbitrary code using the MyASUtil.InstallInfo.RunUserProgram function, and possibly conduct other unspecified attacks. Published: 2011-08-10T20:00:00.000Z Updated: 2024-08-06T23:22:26.997Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/69094 http://dvlabs.tippingpoint.com/advisory/TPTI-11-12 https://kc.mcafee.com/corporate/index?page=content&id=SB10016 http://osvdb.org/74512	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.