Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:agent:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMcafee (b3716737-1d68-5e90-9de7-ce927cce9af4)
ProductAgent (1efe8117-4dbb-5795-bff5-8d2183dd184d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-1258 vulnerable 2026-06-08 05:39:12.506381 SQL injection vulnerability in McAfee Agent's ePO extension
HIGH (8.4)
A blind SQL injection vulnerability in the ePolicy Orchestrator (ePO) extension of MA prior to 5.7.6 can be exploited by an authenticated administrator on ePO to perform arbitrary SQL queries in the back-end database, potentially leading to command execution on the server.
Published: 2022-04-14T13:50:12.000Z
Updated: 2024-08-02T23:55:24.563Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1257 vulnerable 2026-06-08 05:39:12.505185 Improper Verification of Cryptographic Signature by McAfee Agent
MEDIUM (6.1)
Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a local user to gain access to sensitive information through storage in ma.db. The sensitive information has been moved to encrypted database files.
Published: 2022-04-14T13:50:18.000Z
Updated: 2024-08-02T23:55:24.338Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7253 vulnerable 2026-06-08 05:27:12.709178 Improper access control vulnerability in McAfee Agent
MEDIUM (5.7)
Improper access control vulnerability in masvc.exe in McAfee Agent (MA) prior to 5.6.4 allows local users with administrator privileges to disable self-protection via a McAfee supplied command-line utility.
Published: 2020-03-12T10:55:14.321Z
Updated: 2024-09-17T03:53:32.479Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3613 vulnerable 2026-06-08 05:13:55.165591 DLL search order hijacking in MA
MEDIUM (5.9)
DLL Search Order Hijacking vulnerability in McAfee Agent (MA) prior to 5.6.4 allows attackers with local access to execute arbitrary code via execution from a compromised folder.
Published: 2020-06-10T11:12:49.485Z
Updated: 2024-09-16T19:00:57.397Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3599 vulnerable 2026-06-08 05:13:55.151523 McAfee Agent update fixes an Information Disclosure vulnerability
MEDIUM (6.5)
Information Disclosure vulnerability in Remote logging (which is disabled by default) in McAfee Agent (MA) 5.x allows remote unauthenticated users to access sensitive information via remote logging when it is enabled.
Published: 2019-02-28T16:00:00.000Z
Updated: 2024-08-04T19:12:09.595Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3598 vulnerable 2026-06-08 05:13:55.149904 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1559 vulnerable 2026-06-08 05:13:26.128626 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6707 vulnerable 2026-06-08 05:11:54.147804 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6706 vulnerable 2026-06-08 05:11:54.143935 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6703 vulnerable 2026-06-08 05:11:54.138571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3984 vulnerable 2026-06-08 05:07:46.361863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8987 vulnerable 2026-06-08 05:07:05.842052 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3627 vulnerable 2026-06-08 05:04:32.364014 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.