CVE-2019-3629: McAfee Enterprise Security Manager

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Application protection bypass vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows unauthenticated user to impersonate system users via specially crafted parameters.

Affected products

• McAfee Enterprise Security Manager: before 10.4.0 (fixed in 10.4.0); from 11.0.0, before 11.2.0 (fixed in 11.2.0)

Published 2019-06-27. Last modified 2026-06-17.