CVE-2014-9921

9.8 criticalEPSS 3.0%

Critical (9.8) in mcafee cloud analysis and deconstructive services. EPSS 3.0% chance of exploitation in the next 30 days.

Information disclosure vulnerability in McAfee (now Intel Security) Cloud Analysis and Deconstructive Services (CADS) 1.0.0.3x, 1.0.0.4d and earlier allows remote unauthenticated users to view, add, and remove users via a configuration error.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2017-03-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mcafee:cloud_analysis_and_deconstructive_services

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10087
https://kc.mcafee.com/corporate/index?page=content&id=SB10087

Check your stack JSON