GCVE - cpe:2.3:a:mcafee:enterprise_mobility_manager:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:enterprise_mobility_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Mcafee (`b3716737-1d68-5e90-9de7-ce927cce9af4`)
Product	Enterprise Mobility Manager (`5c6a8a9b-4a29-52b8-8a7c-884a17e16bd2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-4592`	vulnerable	2026-06-08 05:02:51.590172	Details available The Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not set the secure flag for the ASP.NET session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Published: 2012-08-22T10:00:00.000Z Updated: 2024-08-06T20:42:54.533Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/78220 https://kc.mcafee.com/corporate/index?page=content&id=SB10022	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4591`	vulnerable	2026-06-08 05:02:51.589874	Details available About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 discloses the name of the user account for an IIS worker process, which allows remote attackers to obtain potentially sensitive information by visiting this page. Published: 2012-08-22T10:00:00.000Z Updated: 2024-08-06T20:42:54.816Z Open on db.gcve.eu Reference links https://kc.mcafee.com/corporate/index?page=content&id=SB10022 https://exchange.xforce.ibmcloud.com/vulnerabilities/78221	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4590`	vulnerable	2026-06-08 05:02:51.589541	Details available Multiple cross-site scripting (XSS) vulnerabilities in About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 might allow remote attackers to inject arbitrary web script or HTML via the (1) User Agent or (2) Connection variable. Published: 2012-08-22T10:00:00.000Z Updated: 2024-08-06T20:42:54.965Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/78222 https://kc.mcafee.com/corporate/index?page=content&id=SB10022	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4589`	vulnerable	2026-06-08 05:02:51.587789	Details available Login.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation. Published: 2012-08-22T10:00:00.000Z Updated: 2024-08-06T20:42:54.544Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/78223 https://kc.mcafee.com/corporate/index?page=content&id=SB10022	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4588`	vulnerable	2026-06-08 05:02:51.587465	Details available McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1 record all invalid usernames presented in failed login attempts, and place them on a list of accounts that an administrator may wish to unlock, which allows remote attackers to cause a denial of service (excessive list size in the EMM Database) via a long sequence of login attempts with different usernames. Published: 2012-08-22T10:00:00.000Z Updated: 2024-09-16T20:17:16.985Z Open on db.gcve.eu Reference links https://kc.mcafee.com/corporate/index?page=content&id=SB10021	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4587`	vulnerable	2026-06-08 05:02:51.586507	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.