CVE-2017-3896: McAfee Agent

Medium severity, CVSS 5.9. EPSS: 2.5% chance of exploitation in the next 30 days.

Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 allows remote attackers to pass unexpected input parameters via a URL that was not completely validated.

Affected products

• McAfee McAfee Agent: version 5.0.0 only; version 5.0.1 only; version 5.0.2 only; version 5.0.3 only; version 5.0.4 only

Published 2017-02-13. Last modified 2026-06-17.