Endpoint Security (Ens) For Windows
Approved changes feed: RSS · Atom
cpe:2.3:a:mcafee_llc:endpoint_security_(ens)_for_windows:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mcafee Llc (7452f80d-0e62-5945-ac8e-d91c01cedde0) |
|---|---|
| Product | Endpoint Security (Ens) For Windows (19cc4a3a-8ff3-52f8-88d6-00fe94f0ca59) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-23883 |
vulnerable | 2026-06-08 05:30:03.354345 |
Null Pointer Dereference vulnerability in McAfee Endpoint Security (ENS)
MEDIUM (4)
A Null Pointer Dereference vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows a local administrator to cause Windows to crash via a specific system call which is not handled correctly. This varies by machine and had partial protection prior to this update.
Published: 2021-02-10T09:25:13.493Z
Updated: 2024-09-17T01:41:53.554Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23882 |
vulnerable | 2026-06-08 05:30:03.354013 |
Improper Access Control in the ENS installer
HIGH (8.2)
Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows local administrators to prevent the installation of some ENS files by placing carefully crafted files where ENS will be installed. This is only applicable to clean installations of ENS as the Access Control rules will prevent modification prior to up an upgrade.
Published: 2021-02-10T09:20:14.574Z
Updated: 2024-09-16T20:57:39.626Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23881 |
vulnerable | 2026-06-08 05:30:03.353679 |
Stored Cross Site Scripting in ENS
MEDIUM (4.8)
A stored cross site scripting vulnerability in ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 February 2021 Update allows an ENS ePO administrator to add a script to a policy event which will trigger the script to be run through a browser block page when a local non-administrator user triggers the policy.
Published: 2021-02-10T10:30:15.368Z
Updated: 2024-09-17T01:41:33.007Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23880 |
vulnerable | 2026-06-08 05:30:03.353308 |
Improper Access Control in the ENS installer
MEDIUM (6.7)
Improper Access Control in attribute in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrator user to perform an uninstallation of the anti-malware engine via the running of a specific command with the correct parameters.
Published: 2021-02-10T09:15:17.543Z
Updated: 2024-09-16T22:45:07.753Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23878 |
vulnerable | 2026-06-08 05:30:03.349883 |
Clear text storage of sensitive Information in ENS
HIGH (7.3)
Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows a local user to view ENS settings and credentials via accessing process memory after the ENS administrator has performed specific actions. To exploit this, the local user has to access the relevant memory location immediately after an ENS administrator has made a configuration change through the console on their machine
Published: 2021-02-10T09:10:14.580Z
Updated: 2024-09-16T19:41:11.060Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.