Mcafee Agent
Vendor:
First CVE: Feb 23, 2015 · Active for 11 years
10
Total CVEs
More Total CVEs than 88% of tracked products
2.5
Avg CVEs / Year
Higher CVE frequency than 74% of tracked products
6.6
Avg CVSS
Higher Avg CVSS than 33% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Mcafee Agent over time
Volume of CVEsAvg CVSS Base Score
First CVE
Feb 23, 2015
11 years ago
Most Recent CVE
Sep 22, 2021
1,767 days ago
CVE Severity & Scoring
Mcafee Agent10 CVEs
40%
60%
All CVEs352,708 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local7 (70.0%)
Network1 (10.0%)
Unknown2 (20.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low6 (60.0%)
High2 (20.0%)
Unknown2 (20.0%)
User Interaction
None6 (60.0%)
Unknown2 (20.0%)
Required2 (20.0%)
Privileges Required
Low6 (60.0%)
High1 (10.0%)
None1 (10.0%)
Unknown2 (20.0%)
Top CVEs
Signals from CVEs in this product scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-7314HIGH Privilege Escalation Vulnerability in the installer in McAfee Data Exchange Layer (DXL) Client for Mac shipped with McAfee Agent (MA) for Mac prior to MA 5.6.6 allows local users t | Sep 10, 2020 | 7.8 | 25 | NO | NO |
CVE-2020-7312HIGH DLL Search Order Hijacking Vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code and escalate privileges via e | Sep 10, 2020 | 7.8 | 24 | NO | NO |
CVE-2021-31841HIGH A DLL sideloading vulnerability in McAfee Agent for Windows prior to 5.7.4 could allow a local user to perform a DLL sideloading attack with an unsigned DLL with a specific name an | Sep 22, 2021 | 7.3 | 23 | NO | NO |
CVE-2021-31836HIGH Improper privilege management vulnerability in maconfig for McAfee Agent for Windows prior to 5.7.4 allows a local user to gain access to sensitive information. The utility was abl | Sep 22, 2021 | 7.1 | 23 | NO | NO |
CVE-2021-31840HIGH A vulnerability in the preloading mechanism of specific dynamic link libraries in McAfee Agent for Windows prior to 5.7.3 could allow an authenticated, local attacker to perform a | Jun 10, 2021 | 7.3 | 22 | NO | NO |
CVE-2020-7315MEDIUM DLL Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code via careful placement of a malicious DLL. | Sep 10, 2020 | 6.7 | 18 | NO | NO |
CVE-2020-7311HIGH Privilege Escalation vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to assume SYSTEM rights during the installation of MA via man | Sep 10, 2020 | 7.0 | 18 | NO | NO |
CVE-2017-3896MEDIUM Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 allows remote attackers to pass unexpected | Feb 13, 2017 | 5.9 | 17 | NO | NO |
CVE-2015-7237MEDIUM Directory traversal vulnerability in the remote log viewing functionality in McAfee Agent (MA) 5.x before 5.0.2 allows remote attackers to obtain sensitive information via unspecif | Sep 18, 2015 | 5.0 | 16 | NO | NO |
CVE-2015-2053MEDIUM The log viewer in McAfee Agent (MA) before 4.8.0 Patch 3 and 5.0.0, when the "Accept connections only from the ePO server" option is disabled, allows remote attackers to conduct cl | Feb 23, 2015 | 4.3 | 14 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (10 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (10 CVEs).
Media Mentions
Signals from CVEs in this product scope (10 CVEs).
Top CNAs Publishing CVEs For Mcafee Agent
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 5.0.4 | 1 | 5.9 | 2.5% | 0 | 0 |
| 5.0.3 | 1 | 5.9 | 2.5% | 0 | 0 |
| 5.0.2 | 1 | 5.9 | 2.5% | 0 | 0 |
| 5.0.1 | 2 | 5.5 | 2.6% | 0 | 0 |
| 5.0.0 | 3 | 5.1 | 2.2% | 0 | 0 |