Enterprise Security Manager

enterprise_security_manager

Vendor: Mcafee • 9 CVEs

CVEs (9)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-3644 1Mcafee 4Active Response Advanced Threat DefenseEnterprise Security Manager+1 more Jun 17, 2026 Sep 11, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service. This affects the scanning proxies.
CVE-2019-3643 1Mcafee 4Active Response Advanced Threat DefenseEnterprise Security Manager+1 more Jun 17, 2026 Sep 11, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, potentially leading to a denial of service. This affects the scanning proxies.
CVE-2019-3632 1Mcafee 1Enterprise Security Manager Jun 17, 2026 Jun 27, 2019 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Directory Traversal vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to gain elevated privileges via specially crafted input.
CVE-2019-3631 1Mcafee 1Enterprise Security Manager Jun 17, 2026 Jun 27, 2019 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary code via specially crafted parameters.
CVE-2019-3630 1Mcafee 1Enterprise Security Manager Jun 17, 2026 Jun 27, 2019 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary code via specially crafted parameters.
CVE-2019-3629 1Mcafee 1Enterprise Security Manager Jun 17, 2026 Jun 27, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Application protection bypass vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows unauthenticated user to impersonate system users via specially crafted parameters.
CVE-2019-3628 1Mcafee 1Enterprise Security Manager Jun 17, 2026 Jun 27, 2019 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Privilege escalation in McAfee Enterprise Security Manager (ESM) 11.x prior to 11.2.0 allows authenticated user to gain access to a core system component via incorrect access control.
CVE-2015-7704 6Citrix DebianMcafee+3 more 14Clustered Data Ontap Data OntapDebian Linux+11 more May 13, 2026 Aug 7, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages.
CVE-2015-7310 1Mcafee 3Enterprise Security Manager Enterprise Security Manager/log ManagerEnterprise Security Manager/receiver May 6, 2026 Sep 22, 2015 N/A· v4 N/A· v3 6.5 MEDIUM· v2 McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enterprise Security Manager/Receiver (ESMREC) before 9.3.2MR18, 9.4.x before 9.4.2MR8, and 9.5.x before 9.5.0MR7 allow remote...Show more McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enterprise Security Manager/Receiver (ESMREC) before 9.3.2MR18, 9.4.x before 9.4.2MR8, and 9.5.x before 9.5.0MR7 allow remote authenticated users to execute arbitrary OS commands via a crafted filename, which is not properly handled when downloading the file.Show less