PatchSiren

Mcafee CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Known exploited McAfee CVE published 2021-11-03

CVE-2021-23874

CVE-2021-23874 is a McAfee Total Protection (MTP) improper privilege management vulnerability that CISA listed in its Known Exploited Vulnerabilities catalog on 2021-11-03. Because it is on the KEV catalog, defenders should treat it as a high-priority remediation item and apply vendor updates per guidance. The supplied corpus does not include a CVSS score or deeper technical detail.

MEDIUM Mcafee CVE published 2017-02-13

CVE-2017-3902

CVE-2017-3902 is a cross-site scripting (XSS) issue in the Web UI of Intel Security ePO versions 5.1.0 through 5.1.3. According to the NVD record and vendor-linked references, the flaw affects authenticated users and can be triggered by bypassing input validation. The public record assigns CVSS 3.0 5.4 (MEDIUM), reflecting network reachability, low attack complexity, required authentication, and user interaction.

MEDIUM Mcafee CVE published 2017-02-13

CVE-2017-3896

CVE-2017-3896 describes an unvalidated-parameter flaw in the remote log viewing capability of Intel Security McAfee Agent 5.0.x. According to the CVE/NVD record, remote attackers could pass unexpected input parameters through a URL that was not completely validated. NVD rates the issue as medium severity and maps it to CWE-20 (Improper Input Validation). The vulnerable range listed in the record covers Mc [truncated]