Skip to content

Mcafee · weakness class

Cross-Site Request Forgery

12 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

  1. Multiple cross-site request forgery (CSRF) vulnerabilities in the Organizations page in Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.9 and earlier allow remote att…CVE-2015-7612Mcafee · 0.8% likely

    CWE-352

  2. Multiple cross-site request forgery (CSRF) vulnerabilities in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allow remot…CVE-2015-2759Mcafee · 0.8% likely

    CWE-352

  3. Cross-site request forgery (CSRF) vulnerability in the User Management module in McAfee Network Security Manager (NSM) before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before 7.…CVE-2014-2390Mcafee · 0.7% likely

    CWE-352

  4. Multiple cross-site request forgery (CSRF) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow remote attackers to hijack the a…CVE-2014-1473Mcafee · 0.7% likely

    CWE-352

  5. Cross-Site Request Forgery (CSRF) in firewall ePO extension of McAfee Endpoint Security (ENS)CVE-2020-7332Mcafee, LLC · CVSS 7 · 0.6% likely

    CWE-352

  6. Cross-site request forgery (CSRF) vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to hijack the authentication of unspecified victim…CVE-2014-8523Mcafee · 0.6% likely

    CWE-352

  7. Multiple cross-site request forgery (CSRF) vulnerabilities in the Organizations and Remediation management page in Enterprise Manager in McAfee Vulnerability Manager (MVM) before…CVE-2016-2199Mcafee · 0.5% likely

    CWE-352

  8. SB10192 - Network Security Management (NSM) - Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerabilityCVE-2017-3965McAfee · CVSS 8.8 · 0.5% likely

    CWE-352

  9. Network Security Management (NSM) - Cross Site Request Forgery vulnerabilityCVE-2020-7336McAfee · CVSS 6.6 · 0.5% likely

    CWE-352

  10. DLP ePO extension - Cross-site request forgeryCVE-2020-7304McAfee · CVSS 7.6 · 0.5% likely

    CWE-352

  11. ePolicy Orchestrator Cloud update fixes multiple Cross-Site Request Forgery vulnerabilitiesCVE-2019-3604McAfee, LLC · CVSS 4.8 · 0.4% likely

    CWE-352

  12. Cross-site scripting (XSS) vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote authenticated users to inject arbitrary web script or HTML via unsp…CVE-2014-8521Mcafee · 0.4% likely

    CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.