CVE-2019-3651

8.8 highEPSS 1.1%

High (8.8) in mcafee advanced threat defense. EPSS 1.1% chance of exploitation in the next 30 days.

Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to ePO as an administrator via using the atduser credentials, which were too permissive.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2019-11-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mcafee:advanced_threat_defense

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10304
https://kc.mcafee.com/corporate/index?page=content&id=SB10304

Check your stack JSON