McAfee Threat Intelligence Exchange Server vulnerabilities

7 CVEs affecting McAfee Threat Intelligence Exchange Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-0543, published 2020-06-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-1559, published 2019-02-27. Medium severity, CVSS 5.9. EPSS: 17.1% chance of exploitation in the next 30 days. If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling…
CVE-2020-2830, published 2020-04-15. Medium severity, CVSS 5.3. EPSS: 4.9% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded:…
CVE-2020-2781, published 2020-04-15. Medium severity, CVSS 5.3. EPSS: 4.9% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241.…
CVE-2019-3738, published 2019-09-18. Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days. RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability. A malicious remote attacker could potentially exploit this vulnerability to coerce…
CVE-2019-3641, published 2019-11-13. Medium severity, CVSS 4.5. EPSS: 0.7% chance of exploitation in the next 30 days. Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0 allows remote authenticated users to modify stored reputation data…
CVE-2018-6695, published 2018-10-03. Medium severity, CVSS 5.9. EPSS: 0.7% chance of exploitation in the next 30 days. SSH host keys generation vulnerability in the server in McAfee Threat Intelligence Exchange Server (TIE Server) 1.3.0, 2.0.x, 2.1.x, 2.2.0 allows man-in-the-middle attackers to spoof servers via…
CVE-2020-0543, published 2020-06-15. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.