CVE-2021-23874 is a McAfee Total Protection (MTP) improper privilege management vulnerability that CISA listed in its Known Exploited Vulnerabilities catalog on 2021-11-03. Because it is on the KEV catalog, defenders should treat it as a high-priority remediation item and apply vendor updates per guidance. The supplied corpus does not include a CVSS score or deeper technical detail.
CVE-2017-3902 is a cross-site scripting (XSS) issue in the Web UI of Intel Security ePO versions 5.1.0 through 5.1.3. According to the NVD record and vendor-linked references, the flaw affects authenticated users and can be triggered by bypassing input validation. The public record assigns CVSS 3.0 5.4 (MEDIUM), reflecting network reachability, low attack complexity, required authentication, and user interaction.
CVE-2017-3896 describes an unvalidated-parameter flaw in the remote log viewing capability of Intel Security McAfee Agent 5.0.x. According to the CVE/NVD record, remote attackers could pass unexpected input parameters through a URL that was not completely validated. NVD rates the issue as medium severity and maps it to CWE-20 (Improper Input Validation). The vulnerable range listed in the record covers Mc [truncated]