Policy Auditor

policy_auditor

Vendor: Mcafee • 9 CVEs

CVEs (9)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-31852 1Mcafee 1Policy Auditor Jun 17, 2026 Nov 23, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 A Reflected Cross-Site Scripting vulnerability in McAfee Policy Auditor prior to 6.5.2 allows a remote unauthenticated attacker to inject arbitrary web script or HTML via the UID request parameter. The malicious script i...Show more A Reflected Cross-Site Scripting vulnerability in McAfee Policy Auditor prior to 6.5.2 allows a remote unauthenticated attacker to inject arbitrary web script or HTML via the UID request parameter. The malicious script is reflected unmodified into the Policy Auditor web-based interface which could lead to the extract of end user session token or login credentials. These may be used to access additional security-critical applications or conduct arbitrary cross-domain requests.Show less
CVE-2021-31851 1Mcafee 1Policy Auditor Jun 17, 2026 Nov 23, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 A Reflected Cross-Site Scripting vulnerability in McAfee Policy Auditor prior to 6.5.2 allows a remote unauthenticated attacker to inject arbitrary web script or HTML via the profileNodeID request parameters. The malicio...Show more A Reflected Cross-Site Scripting vulnerability in McAfee Policy Auditor prior to 6.5.2 allows a remote unauthenticated attacker to inject arbitrary web script or HTML via the profileNodeID request parameters. The malicious script is reflected unmodified into the Policy Auditor web-based interface which could lead to the extraction of end user session token or login credentials. These may be used to access additional security-critical applications or conduct arbitrary cross-domain requests.Show less
CVE-2020-15719 5Mcafee OpenldapOpensuse+2 more 5Blockchain Platform Enterprise LinuxLeap+2 more Jun 17, 2026 Jul 14, 2020 N/A· v4 4.2 MEDIUM· v3 4.0 MEDIUM· v2 libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This i...Show more libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux.Show less
CVE-2019-16168 8Canonical DebianFedoraproject+5 more 20Active Iq Unified Manager Communications Design StudioDebian Linux+17 more Jun 17, 2026 Sep 9, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."
CVE-2019-13057 7Apple CanonicalDebian+4 more 9Blockchain Platform Debian LinuxLeap+6 more Jun 17, 2026 Jul 26, 2019 N/A· v4 4.9 MEDIUM· v3 3.5 LOW· v2 An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant de...Show more An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from requesting authorization as an identity from another database during a SASL bind or with a proxyAuthz (RFC 4370) control. (It is not a common configuration to deploy a system where the server administrator and a DB administrator enjoy different levels of trust.)Show less
CVE-2017-17740 4Mcafee OpenldapOpensuse+1 more 4Blockchain Platform LeapOpenldap+1 more May 13, 2026 Dec 18, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to ca...Show more contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation.Show less
CVE-2017-9287 5Debian McafeeOpenldap+2 more 10Blockchain Platform Debian LinuxEnterprise Linux Desktop+7 more May 13, 2026 May 29, 2017 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search including the Paged Results control with...Show more servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search including the Paged Results control with a page size of 0.Show less
CVE-2016-4472 4Canonical Libexpat ProjectMcafee+1 more 4Libexpat Policy AuditorPython+1 more May 6, 2026 Jun 30, 2016 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data. NO...Show more The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716.Show less
CVE-2016-0718 9Apple CanonicalDebian+6 more 14Debian Linux FirefoxLeap+11 more May 6, 2026 May 26, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.