Vulnerability Database

314,452

Total vulnerabilities in the database

CVE-2019-3653

Improper access control vulnerability in Configuration tool in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to gain access to security configuration via unauthorized use of the configuration tool.

  • Published: Oct 9, 2019
  • Updated: Nov 9, 2025
  • CVE: CVE-2019-3653
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.6
  • AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N

CVSS v2:

  • Severity: Low
  • Score: 2.1
  • AV:L/AC:L/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
mcafee / endpoint_security 10.5.0 10.5.5.x
mcafee / endpoint_security 10.6.0 10.6.1
mcafee / endpoint_security 10.16.1 10.16.1.x