Mcafee Llc Mcafee Enterprise Security Manager vulnerabilities

5 known vulnerabilities affecting mcafee_llc/mcafee_enterprise_security_manager.

Total CVEs
5
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH4MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2019-3628HIGHCVSS 8.8≥ 11.x, < 11.2.02019-06-27
CVE-2019-3628 [HIGH] CVE-2019-3628: Privilege escalation in McAfee Enterprise Security Manager (ESM) 11.x prior to 11.2.0 allows authent Privilege escalation in McAfee Enterprise Security Manager (ESM) 11.x prior to 11.2.0 allows authenticated user to gain access to a core system component via incorrect access control.
cvelistv5nvd
CVE-2019-3631HIGHCVSS 7.2≥ 11.x, < 11.2.0≥ 10.x, < 10.4.02019-06-27
CVE-2019-3631 [HIGH] CWE-78 CVE-2019-3631: Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prio Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary code via specially crafted parameters.
cvelistv5nvd
CVE-2019-3630HIGHCVSS 7.2≥ 11.x, < 11.2.0≥ 10.x, < 10.4.02019-06-27
CVE-2019-3630 [HIGH] CWE-78 CVE-2019-3630: Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prio Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary code via specially crafted parameters.
cvelistv5nvd
CVE-2019-3632HIGHCVSS 8.8≥ 11.x, < 11.2.0≥ 10.x, < 10.4.02019-06-27
CVE-2019-3632 [HIGH] CWE-22 CVE-2019-3632: Directory Traversal vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and pr Directory Traversal vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to gain elevated privileges via specially crafted input.
cvelistv5nvd
CVE-2019-3629MEDIUMCVSS 6.5≥ 11.x, < 11.2.0≥ 10.x, < 10.4.02019-06-27
CVE-2019-3629 [MEDIUM] CVE-2019-3629: Application protection bypass vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11. Application protection bypass vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows unauthenticated user to impersonate system users via specially crafted parameters.
cvelistv5nvd