Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-7256 State: PUBLISHED Published: 2020-03-18T21:05:23 Last Updated: 2024-08-04T09:25:48.956Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: McAfee Products: Network Security Management (NSM) Problem Types: CWE-79 Description: Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10310
CVE ID: CVE-2020-7257 State: PUBLISHED Published: 2020-04-15T12:00:19.206812Z Last Updated: 2024-09-16T20:38:08.253Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: McAfee LLC Products: McAfee Endpoint Security (ENS) Problem Types: CWE-264 Description: Privilege escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links whilst an anti-virus scan was in progress. This is timing dependent. Additional Analyst Notes: - CVE Program Container: References: - https://kc.
was in progress. This is timing dependent. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10309
CVE ID: CVE-2020-7258 State: PUBLISHED Published: 2020-03-18T21:05:15 Last Updated: 2024-08-04T09:25:48.593Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: McAfee Products: Network Security Management (NSM) Problem Types: CWE-79 Description: Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10310
CVE ID: CVE-2020-7259 State: PUBLISHED Published: 2020-04-15T11:55:13.399395Z Last Updated: 2024-09-17T00:31:04.559Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L) Vendors: McAfee LLC Products: McAfee Endpoint Security (ENS) Problem Types: CWE-264 Description: Exploitation of Privilege/Trust vulnerability in file in McAfee Endpoint Security (ENS) Prior to 10.7.0 February 2020 Update allows local users to bypass local security protection via a carefully crafted input file Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10309
CVE ID: CVE-2020-7260 State: PUBLISHED Published: 2020-03-26T10:55:14.038843Z Last Updated: 2024-09-17T02:51:46.073Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H) Vendors: McAfee, LLC Products: Mcafee Application and Change Control (MACC) Problem Types: CWE-264 Description: DLL Side Loading vulnerability in the installer for McAfee Application and Change Control (MACC) prior to 8.3 allows local users to execute arbitrary code via execution from a compromised folder. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10313
CVE ID: CVE-2020-7261 State: PUBLISHED Published: 2020-04-15T11:50:13.347804Z Last Updated: 2024-09-16T20:16:33.734Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N) Vendors: McAfee LLC Products: McAfee Endpoint Security (ENS) Problem Types: CWE-119 Description: Buffer Overflow via Environment Variables vulnerability in AMSI component in McAfee Endpoint Security (ENS) Prior to 10.7.0 February 2020 Update allows local users to disable Endpoint Security via a carefully crafted user input. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10309
CVE ID: CVE-2020-7262 State: PUBLISHED Published: 2020-06-22T08:35:12.625240Z Last Updated: 2024-09-16T18:17:58.219Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: McAfee, LLC Products: McAfee Advanced Threat Defense (ATD) Problem Types: CWE-200 Description: Improper Access Control vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.10.0 allows local users to view sensitive files via a carefully crafted HTTP request parameter. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10319
CVE ID: CVE-2020-7263 State: PUBLISHED Published: 2020-04-01T06:40:13.222326Z Last Updated: 2024-09-16T23:05:21.599Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: McAfee, LLC Products: Endpoint Security (ENS) for Window Problem Types: CWE-264 Description: Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security (ENS) for Windows all current versions allows local administrator to alter ENS configuration up to and including disabling all protection offered by ENS via insecurely implemented encryption of configuration for export and import. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corp
ation for export and import. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10314
CVE ID: CVE-2020-7264 State: PUBLISHED Published: 2020-05-08T11:45:14.046242Z Last Updated: 2024-09-17T02:57:21.298Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: McAfee,LLC Products: McAfee Endpoint Security (ENS) for Windows Problem Types: CWE-274 Description: Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 Hotfix 199847 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine. Additional Analyst Notes: - CVE Progr
s is achieved through running a malicious script or program on the target machine. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10316
CVE ID: CVE-2020-7265 State: PUBLISHED Published: 2020-05-08T11:50:14.514170Z Last Updated: 2024-09-16T20:42:09.215Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: McAfee,LLC Products: McAfee Endpoint Security (ENS) for Mac Problem Types: CWE-274 Description: Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Mac prior to 10.6.9 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine. Additional Analyst Notes: - CVE Program Container: Referenc
running a malicious script or program on the target machine. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10316
CVE ID: CVE-2020-7266 State: PUBLISHED Published: 2020-05-08T11:55:14.049262Z Last Updated: 2024-09-17T04:04:21.109Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: McAfee,LLC Products: McAfee VirusScan Enterprise (VSE) for Windows Problem Types: CWE-274 Description: Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Windows prior to 8.8 Patch 14 Hotfix 116778 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine. Additional Analyst Notes:
ed file. This is achieved through running a malicious script or program on the target machine. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10316
CVE ID: CVE-2020-7267 State: PUBLISHED Published: 2020-05-08T12:25:14.793515Z Last Updated: 2024-09-17T02:51:54.159Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: McAfee,LLC Products: McAfee VirusScan Enterprise (VSE) for Linux Problem Types: CWE-274 Description: Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Linux prior to 2.0.3 Hotfix 2635000 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine. Additional Analyst Notes: - CVE Pro
his is achieved through running a malicious script or program on the target machine. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10316
CVE ID: CVE-2020-7268 State: PUBLISHED Published: 2020-09-16T01:20:13 Last Updated: 2024-08-04T09:25:48.864Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: McAfee Products: McAfee Email Gateway (MEG) Problem Types: CWE-22 Description: Path Traversal vulnerability in McAfee McAfee Email Gateway (MEG) prior to 7.6.406 allows remote attackers to traverse the file system to access files or directories that are outside of the restricted directory via external input to construct a path name that should be within a restricted directory. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10323
CVE ID: CVE-2020-7269 State: PUBLISHED Published: 2021-04-15T08:00:17 Last Updated: 2024-08-04T09:25:48.625Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: McAfee,LLC Products: McAfee Advanced Threat Defense (ATD) Problem Types: CWE-200 Description: Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deployed as recommended with no direct access from the Internet to them. Additional Analyst Notes: - CVE Program Container
ployed as recommended with no direct access from the Internet to them. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10336
CVE ID: CVE-2020-7270 State: PUBLISHED Published: 2021-04-15T08:05:19 Last Updated: 2024-08-04T09:25:48.671Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: McAfee,LLC Products: McAfee Advanced Threat Defense (ATD) Problem Types: CWE-200 Description: Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deployed as recommended with no direct access from the Internet to them. Additional Analyst Notes: - CVE Program Container
CVE ID: CVE-2020-7273 State: PUBLISHED Published: 2020-04-15T11:35:14.363986Z Last Updated: 2024-09-16T16:32:41.543Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:H) Vendors: McAfee LLC Products: McAfee Endpoint Security (ENS) Problem Types: CWE-269 Description: Accessing functionality not properly constrained by ACLs vulnerability in the autorun start-up protection in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to delete or rename programs in the autorun key via manipulation of some parameters. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10
itional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10309
CVE ID: CVE-2020-7274 State: PUBLISHED Published: 2020-04-15T11:30:17.645916Z Last Updated: 2024-09-16T17:04:10.166Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L) Vendors: McAfee LLC Products: McAfee Endpoint Security (ENS) Problem Types: CWE-269 Description: Privilege escalation vulnerability in McTray.exe in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to spawn unrelated processes with elevated privileges via the system administrator granting McTray.exe elevated privileges (by default it runs with the current user's privileges). Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.co
th the current user's privileges). Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10309
CVE ID: CVE-2020-7275 State: PUBLISHED Published: 2020-04-15T11:30:23.536584Z Last Updated: 2024-09-17T00:05:29.685Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: McAfee LLC Products: McAfee Endpoint Security (ENS) Problem Types: CWE-428 Description: Accessing, modifying or executing executable files vulnerability in the uninstaller in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to execute arbitrary code via a carefully crafted input file. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10309
CVE ID: CVE-2020-7276 State: PUBLISHED Published: 2020-04-15T11:20:13.263849Z Last Updated: 2024-09-17T01:01:18.516Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:L) Vendors: McAfee LLC Products: McAfee Endpoint Security (ENS) Problem Types: CWE-287 Description: Authentication bypass vulnerability in MfeUpgradeTool in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows administrator users to access policy settings via running this tool. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10309
CVE ID: CVE-2020-7277 State: PUBLISHED Published: 2020-04-15T11:20:19.699545Z Last Updated: 2024-09-17T00:05:40.086Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: McAfee LLC Products: McAfee Endpoint Security (ENS) Problem Types: CWE-693 Description: Protection mechanism failure in all processes in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows local users to stop certain McAfee ENS processes, reducing the protection offered. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10309
CVE ID: CVE-2020-7278 State: PUBLISHED Published: 2020-04-15T09:25:13.767287Z Last Updated: 2024-09-16T20:16:22.772Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: McAfee LLC Products: McAfee Endpoint Security (ENS) Problem Types: CWE-284 Description: Exploiting incorrectly configured access control security levels vulnerability in ENS Firewall in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 and 10.6.1 April 2020 updates allows remote attackers and local users to allow or block unauthorized traffic via pre-existing rules not being handled correctly when updating to the February 2020 updates. Additional Analyst Notes: - CVE Program Con
ules not being handled correctly when updating to the February 2020 updates. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10309
CVE ID: CVE-2020-7279 State: PUBLISHED Published: 2020-06-10T11:17:50.265499Z Last Updated: 2024-09-16T20:36:32.721Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:N) Vendors: McAfee, LLC Products: McAfee Host Intrusion Prevention System (Host IPS) for Windows Problem Types: CWE-426 Description: DLL Search Order Hijacking Vulnerability in the installer component of McAfee Host Intrusion Prevention System (Host IPS) for Windows prior to 8.0.0 Patch 15 Update allows attackers with local access to execute arbitrary code via execution from a compromised folder. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=conte
older. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10320
CVE ID: CVE-2020-7280 State: PUBLISHED Published: 2020-06-10T11:52:43.610724Z Last Updated: 2024-09-16T16:53:22.302Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: McAfee, LLC Products: McAfee VirusScan Enterprise (VSE) Problem Types: CWE-269 Description: Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise (VSE) prior to 8.8 Patch 15 allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links. This is timing dependent. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?p
ming dependent. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10302 - https://www.zerodayinitiative.com/advisories/ZDI-20-702/
CVE ID: CVE-2020-7281 State: PUBLISHED Published: 2020-07-03T13:25:21 Last Updated: 2024-08-04T09:25:48.689Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: McAfee,LLC Products: McAfee Total Protection (MTP) Problem Types: CWE-269 Description: Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine. Additional Analyst Notes: - CVE Program Container: References: - https://service.mc
pt or program on the target machine. Additional Analyst Notes: - CVE Program Container: References: - https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS103062
CVE ID: CVE-2020-7282 State: PUBLISHED Published: 2020-07-03T13:25:14 Last Updated: 2024-08-04T09:25:48.950Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: McAfee,LLC Products: McAfee Total Protection (MTP) Problem Types: CWE-59 Description: Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine. Additional Analyst Notes: - CVE Program Container: References: - https://service.mcafe
or program on the target machine. Additional Analyst Notes: - CVE Program Container: References: - https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS103062
CVE ID: CVE-2020-7283 State: PUBLISHED Published: 2020-07-03T13:30:17 Last Updated: 2024-08-04T09:25:48.525Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: McAfee,LLC Products: McAfee Total Protection (MTP) Problem Types: CWE-274 Description: Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to create and edit files via symbolic link manipulation in a location they would otherwise not have access to. This is achieved through running a malicious script or program on the target machine. Additional Analyst Notes: - CVE Program Container: References: - https://service.mcafee.com/webcenter/portal/cp/home/article
tional Analyst Notes: - CVE Program Container: References: - https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS103062
CVE ID: CVE-2020-7284 State: PUBLISHED Published: 2020-07-03T18:40:12 Last Updated: 2024-08-04T09:25:48.430Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: McAfee Products: Network Security Management (NSM) Problem Types: CWE-200 Description: Exposure of Sensitive Information in McAfee Network Security Management (NSM) prior to 10.1.7.7 allows local users to gain unauthorised access to the root account via execution of carefully crafted commands from the restricted command line interface (CLI). Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10322
CVE ID: CVE-2020-7285 State: PUBLISHED Published: 2020-05-08T12:35:19.678985Z Last Updated: 2024-09-17T02:21:49.005Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: McAfee,LLC Products: McAfee MVISION Endpoint Problem Types: CWE-274 Description: Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.5.0.94 allows a malicious script or program to perform functions that the local executing user has not been granted access to. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10317
CVE ID: CVE-2020-7286 State: PUBLISHED Published: 2020-05-08T12:35:13.556727Z Last Updated: 2024-09-16T19:46:27.320Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: McAfee,LLC Products: McAfee Exploit Detection and Response (EDR) for Windows Problem Types: CWE-274 Description: Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Windows prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10317
CVE ID: CVE-2020-7287 State: PUBLISHED Published: 2020-05-08T12:40:26.268973Z Last Updated: 2024-09-16T19:51:00.022Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: McAfee,LLC Products: McAfee Exploit Detection and Response (EDR) for Linux Problem Types: CWE-274 Description: Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Linux prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10317
CVE ID: CVE-2020-7288 State: PUBLISHED Published: 2020-05-08T12:40:20.327782Z Last Updated: 2024-09-17T03:42:54.594Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: McAfee,LLC Products: McAfee Exploit Detection and Response (EDR) for Mac Problem Types: CWE-274 Description: Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Mac prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10317
CVE ID: CVE-2020-7289 State: PUBLISHED Published: 2020-05-08T12:40:14.204465Z Last Updated: 2024-09-17T03:22:27.152Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: McAfee,LLC Products: McAfee Active Response (MAR) for Windows Problem Types: CWE-274 Description: Privilege Escalation vulnerability in McAfee Active Response (MAR) for Windows prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10317