Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:advanced_threat_defense_(atd):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMcafee (b3716737-1d68-5e90-9de7-ce927cce9af4)
ProductAdvanced Threat Defense (Atd) (b92cb4c9-452f-5229-a64b-7bbc8920619e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-3663 vulnerable 2026-06-08 05:13:55.298851 Advanced Threat Defense (ATD) - Unprotected storage of shared credentials vulnerability
CRITICAL (9.8)
Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows local attacker to gain access to the root password via accessing sensitive files on the system. This was originally published with a CVSS rating of High, further investigation has resulted in this being updated to Critical. The root password is common across all instances of ATD prior to 4.8. See the Security bulletin for further details
Published: 2019-11-13T23:50:52.000Z
Updated: 2024-08-04T19:12:09.599Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3662 vulnerable 2026-06-08 05:13:55.298431 Advanced Threat Defense (ATD) - Path Traversal: '/absolute/pathname/here' vulnerability
MEDIUM (6.5)
Path Traversal: '/absolute/pathname/here' vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to gain unintended access to files on the system via carefully constructed HTTP requests.
Published: 2019-11-13T23:45:53.000Z
Updated: 2024-08-04T19:12:09.656Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3661 vulnerable 2026-06-08 05:13:55.298104 Advanced Threat Defense (ATD) - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
HIGH (8.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute database commands via carefully constructed time based payloads.
Published: 2019-11-13T23:40:52.000Z
Updated: 2024-08-04T19:12:09.667Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3660 vulnerable 2026-06-08 05:13:55.297741 Advanced Threat Defense (ATD) - Improper Neutralization of HTTP requests
HIGH (8.4)
Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute commands on the server remotely via carefully constructed HTTP requests.
Published: 2019-11-13T23:05:53.000Z
Updated: 2024-08-04T19:12:09.655Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3651 vulnerable 2026-06-08 05:13:55.290531 Advanced Threat Defense (ATD) - Information Disclosure vulnerability
HIGH (8.8)
Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to ePO as an administrator via using the atduser credentials, which were too permissive.
Published: 2019-11-13T22:45:53.000Z
Updated: 2024-08-04T19:12:09.709Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3650 vulnerable 2026-06-08 05:13:55.290171 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3649 vulnerable 2026-06-08 05:13:55.288772 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4057 vulnerable 2026-06-08 05:09:38.243555 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4055 vulnerable 2026-06-08 05:09:38.242941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4054 vulnerable 2026-06-08 05:09:38.242567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4053 vulnerable 2026-06-08 05:09:38.242145 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4052 vulnerable 2026-06-08 05:09:38.238941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.