Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMcafee (b3716737-1d68-5e90-9de7-ce927cce9af4)
ProductEndpoint Security (6d2736ea-e844-5073-bb4a-39b93e8822f2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-7251 vulnerable 2026-06-08 05:27:12.704620 ESConfig Tool able to edit configuration for newer version
MEDIUM (5)
Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthorised use of the configuration tool from older versions of ENS.
Published: 2020-02-14T14:50:14.000Z
Updated: 2024-08-04T09:25:48.459Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3653 vulnerable 2026-06-08 05:13:55.293505 ESConfig Tool access not controlled
MEDIUM (4.6)
Improper access control vulnerability in Configuration tool in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to gain access to security configuration via unauthorized use of the configuration tool.
Published: 2019-10-09T14:21:45.000Z
Updated: 2024-08-04T19:12:09.671Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3652 vulnerable 2026-06-08 05:13:55.291064 ENS code injection in EPSetup.exe
MEDIUM (5)
Code Injection vulnerability in EPSetup.exe in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to get their malicious code installed by the ENS installer via code injection into EPSetup.exe by an attacker with access to the installer.
Published: 2019-10-09T14:21:13.000Z
Updated: 2024-08-04T19:12:09.719Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3586 vulnerable 2026-06-08 05:13:55.131703 McAfee Endpoint Security firewall not always acting on GTI lookup results
HIGH (7.5)
Protection Mechanism Failure in the Firewall in McAfee Endpoint Security (ENS) 10.x prior to 10.6.1 May 2019 update allows context-dependent attackers to circumvent ENS protection where GTI flagged IP addresses are not blocked by the ENS Firewall via specially crafted malicious sites where the GTI reputation is carefully manipulated and does not correctly trigger the ENS Firewall to block the connection.
Published: 2019-05-15T15:48:10.000Z
Updated: 2024-08-04T19:12:09.414Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3582 vulnerable 2026-06-08 05:13:55.118292 McAfee Endpoint Security updates fix a privilege escalation vulnerability
HIGH (8.6)
Privilege Escalation vulnerability in Microsoft Windows client in McAfee Endpoint Security (ENS) 10.6.1 and earlier allows local users to gain elevated privileges via a specific set of circumstances.
Published: 2019-02-28T16:00:00.000Z
Updated: 2024-08-04T19:12:09.374Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8010 vulnerable 2026-06-08 05:08:13.693912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3984 vulnerable 2026-06-08 05:07:46.364614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.