McAfee Threat Intelligence Exchange vulnerabilities

2 CVEs affecting McAfee Threat Intelligence Exchange, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-3612, published 2019-04-10.

More from McAfee.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-7238, published 2015-09-18. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. The Secondary server in Threat Intelligence Exchange (TIE) before 1.2.0 uses weak permissions for unspecified (1) configuration files and (2) installation logs, which allows local users to obtain…
• CVE-2019-3612, published 2019-04-10. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. Information Disclosure vulnerability in McAfee DXL Platform and TIE Server in DXL prior to 5.0.1 HF2 and TIE prior to 2.3.1 HF1 allows Authenticated users to view sensitive information in plain text…