GCVE - cpe:2.3:a:mcafee:vulnerability_manager:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:vulnerability_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Mcafee (`b3716737-1d68-5e90-9de7-ce927cce9af4`)
Product	Vulnerability Manager (`34b18a02-a5f0-546f-94ce-7c3939e4d268`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-2199`	vulnerable	2026-06-08 05:07:33.608317	Details available Multiple cross-site request forgery (CSRF) vulnerabilities in the Organizations and Remediation management page in Enterprise Manager in McAfee Vulnerability Manager (MVM) before 7.5.10 allow remote attackers to hijack the authentication of administrators for requests that have unspecified impact via unknown vectors. Published: 2016-02-01T21:00:00.000Z Updated: 2024-09-16T17:58:29.227Z Open on db.gcve.eu Reference links https://kc.mcafee.com/corporate/index?page=content&id=SB10147	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8989`	vulnerable	2026-06-08 05:07:05.845001	Details available Unsalted password vulnerability in the Enterprise Manager (web portal) component in Intel Security McAfee Vulnerability Manager (MVM) 7.5.8 and earlier allows attackers to more easily decrypt user passwords via brute force attacks against the database. Published: 2017-03-14T22:00:00.000Z Updated: 2024-08-06T08:36:31.043Z Open on db.gcve.eu Reference links https://kc.mcafee.com/corporate/index?page=content&id=SB10117	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-7612`	vulnerable	2026-06-08 05:07:01.546744	Details available Multiple cross-site request forgery (CSRF) vulnerabilities in the Organizations page in Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.9 and earlier allow remote attackers to hijack the authentication of administrators for requests that have unspecified impact via unknown vectors. Published: 2015-10-01T20:00:00.000Z Updated: 2024-09-16T20:21:24.124Z Open on db.gcve.eu Reference links https://kc.mcafee.com/corporate/index?page=content&id=SB10135 http://www.securitytracker.com/id/1033682	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1473`	vulnerable	2026-06-08 05:05:24.725694	Details available Multiple cross-site request forgery (CSRF) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow remote attackers to hijack the authentication of users for requests that modify HTML via unspecified vectors related to the "response web page." Published: 2014-01-16T02:00:00.000Z Updated: 2024-08-06T09:42:35.441Z Open on db.gcve.eu Reference links http://secunia.com/advisories/56394 http://www.securityfocus.com/bid/64795 http://www.securitytracker.com/id/1029591 https://exchange.xforce.ibmcloud.com/vulnerabilities/90245 http://osvdb.org/101939	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1472`	vulnerable	2026-06-08 05:05:24.723970	Details available Multiple cross-site scripting (XSS) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2014-01-16T02:00:00.000Z Updated: 2024-08-06T09:42:35.679Z Open on db.gcve.eu Reference links http://secunia.com/advisories/56394 http://www.securityfocus.com/bid/64795 http://www.securitytracker.com/id/1029591 https://exchange.xforce.ibmcloud.com/vulnerabilities/90244 http://osvdb.org/101940	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.