McAfee Mvision Endpoint vulnerabilities

6 CVEs affecting McAfee Mvision Endpoint, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7329, published 2020-11-11.

More from McAfee.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-7328, published 2020-11-11. High severity, CVSS 7.2. EPSS: 2.2% chance of exploitation in the next 30 days. External entity attack vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers to gain control of a resource or trigger arbitrary code execution via…
• CVE-2020-7329, published 2020-11-11. High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days. Server-side request forgery vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers trigger server-side DNS requests to arbitrary domains via carefully…
• CVE-2019-3584, published 2019-01-23. Medium severity, CVSS 6.0. EPSS: 0.3% chance of exploitation in the next 30 days. Exploitation of Authentication vulnerability in MVision Endpoint in McAfee MVision Endpoint Prior to 1811 Update 1 (18.11.31.62) allows authenticated administrator users --> administrators to Remove…
• CVE-2020-7325, published 2020-09-09. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links…
• CVE-2020-7324, published 2020-09-09. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Access Control vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to bypass security mechanisms and deny access to the SYSTEM folder via incorrectly applied…
• CVE-2020-7285, published 2020-05-08. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.5.0.94 allows a malicious script or program to perform functions that the local executing user has not been granted access to.