Application and change control

This hub aggregates every CVE we track for Application and change control, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 9 most recently published vulnerabilities affecting Application and change control.

• CVE-2023-5607 An improper limitation of a path name to a restricted directory (path traversal) vulnerability in the TACC ePO extension, for on-premises ePO servers, prior to version 8.4.0 could lead to an autho...8.4Nov 27, 2023
• CVE-2023-0221Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with administrator privileges to bypass the execution controls provided by ACC using the util...4.4Jan 13, 2023
• CVE-2021-31833Potential product security bypass vulnerability in McAfee Application and Change Control (MACC) prior to version 8.3.4 allows a locally logged in attacker to circumvent the application solidificati...7.1Jan 4, 2022
• CVE-2020-7334Improper privilege assignment vulnerability in the installer component of MACC7.7Oct 15, 2020
• CVE-2020-7309Cross Site Scripting vulnerability in ePO extension of MACC3.9Aug 26, 2020
• CVE-2020-7260MACC installer DLL side loading7.3Mar 26, 2020
• CVE-2018-6668Bypass Application Control with simple DLL6.1Dec 31, 2018
• CVE-2018-6669Bypass Application Control through an ASP.NET form6.3Dec 20, 2018
• CVE-2017-3912McAfee Application Control and Change Control (MACC) - password management security feature bypass (SFB) leading to an authentication bypass4.4Sep 18, 2018