Active Response
Vendor:
First CVE: Apr 8, 2016 · Active for 10 years
7
Total CVEs
More Total CVEs than 83% of tracked products
2.3
Avg CVEs / Year
Higher CVE frequency than 73% of tracked products
7.2
Avg CVSS
Higher Avg CVSS than 44% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Active Response over time
Volume of CVEsAvg CVSS Base Score
First CVE
Apr 8, 2016
10 years ago
Most Recent CVE
Oct 15, 2020
2,108 days ago
CVE Severity & Scoring
Active Response7 CVEs
29%
71%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local5 (71.4%)
Network2 (28.6%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low7 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None7 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low3 (42.9%)
High2 (28.6%)
None2 (28.6%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-3984MEDIUM The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161, Agent (MA) 5.x before 5.0.2 Hotfix 1110392 (5.0.2.333), Data Exchange Layer 2.x (DXL) | Apr 8, 2016 | 5.1 | 27 | NO | YES |
CVE-2019-3643HIGH McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, potentially leading to a denial of service. This affects the scanning pr | Sep 11, 2019 | 7.5 | 25 | NO | NO |
CVE-2019-3644HIGH McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service. This affects the scanning pr | Sep 11, 2019 | 7.5 | 24 | NO | NO |
CVE-2020-7289HIGH Privilege Escalation vulnerability in McAfee Active Response (MAR) for Windows prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local exec | May 8, 2020 | 7.8 | 20 | NO | NO |
CVE-2020-7291HIGH Privilege Escalation vulnerability in McAfee Active Response (MAR) for Mac prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executin | May 8, 2020 | 7.8 | 19 | NO | NO |
CVE-2020-7290HIGH Privilege Escalation vulnerability in McAfee Active Response (MAR) for Linux prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local execut | May 8, 2020 | 7.8 | 19 | NO | NO |
CVE-2020-7326MEDIUM Improperly implemented security check in McAfee Active Response (MAR) prior to 2.4.4 may allow local administrators to execute malicious code via stopping a core Windows service le | Oct 15, 2020 | 6.7 | 18 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
14.3% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Active Response
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2.4.3 | 3 | 7.8 | 0.3% | 0 | 0 |
| 2.4 | 2 | 7.5 | 2.4% | 0 | 0 |
| 2.3 | 2 | 7.5 | 2.4% | 0 | 0 |
| 2.2 | 2 | 7.5 | 2.4% | 0 | 0 |
| 2.1 | 2 | 7.5 | 2.4% | 0 | 0 |
| 2.0.1 | 2 | 7.5 | 2.4% | 0 | 0 |
| 2.0 | 2 | 7.5 | 2.4% | 0 | 0 |
| 1.1.0 | 2 | 7.5 | 2.4% | 0 | 0 |
| 1.0.0 | 2 | 7.5 | 2.4% | 0 | 0 |