CVE-2015-8989: McAfee Vulnerability Manager

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Unsalted password vulnerability in the Enterprise Manager (web portal) component in Intel Security McAfee Vulnerability Manager (MVM) 7.5.8 and earlier allows attackers to more easily decrypt user passwords via brute force attacks against the database.

Affected products

• McAfee Vulnerability Manager: up to and including 7.5.8

Published 2017-03-14. Last modified 2026-06-17.