vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2018-6664

SB10233 - Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 - Application Protections Bypass vulnerability

MEDIUM
5.8
CVSS Score
Published: May 25, 2018 at 01:00 PM UTC
Updated: June 17, 2026 at 02:02 AM UTC
1 product affected across 1 vendorData Loss Prevention Endpoint· also runs on 1 platform

Using Data Loss Prevention (DLP) Endpoint by McAfee?

Get instant alerts when new vulnerabilities affect Data Loss Prevention (DLP) Endpoint - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM5.8
Exploit prediction
EPSS 0.7%

Description

Application Protections Bypass vulnerability in Microsoft Windows in McAfee Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 allows authenticated users to bypass the product block action via a command-line utility.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Data Loss Prevention Endpoint· McAfee
95%
v < 10.0.500v < 11.0.40010 ≤ v < 10.0.50011 ≤ v < 11.0.4001011
Affected range stops below 10.0.500, so it looks safe — our inference, not a vendor statement
Affected range stops below 11.0.400, so it looks safe — our inference, not a vendor statement
microsoft-windows (environment)

Runs on — not affected

The affected product only carries this flaw when running on these platforms. The platforms themselves are not vulnerable.

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (4)

VDB Entryx_refsource_BID
Source: [email protected]
http://www.securityfocus.com/bid/104299
VDB Entryx_refsource_SECTRACK
Source: [email protected]
http://www.securitytracker.com/id/1040895
x_refsource_CONFIRM
Source: [email protected]
https://kc.mcafee.com/corporate/index?page=content&id=SB10237
Vendor Advisory
Source: [email protected]
https://kc.mcafee.com/corporate/index?page=content&id=SB10233

CVSS

5.8MEDIUMtrellix
Attack Vector
PHYSICAL
Complexity
HIGH
Privileges
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
LOW
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-347

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card