McAfee Application Change Control vulnerabilities

3 CVEs affecting McAfee Application Change Control, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-6668, published 2018-12-31.

More from McAfee.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-6669, published 2018-12-20. High severity, CVSS 8.0. EPSS: 0.5% chance of exploitation in the next 30 days. A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows a remote or local user to execute blacklisted files through an ASP.NET form.
• CVE-2018-6668, published 2018-12-31. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL through interpreters such as PowerShell.
• CVE-2018-6690, published 2018-09-18. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control (MACC) 8.0.0 Hotfix 4 and earlier allows authenticated users to…