Vulnerabilities > Cisco > Advanced Malware Protection FOR Endpoints

DATE CVE VULNERABILITY TITLE RISK
2018-04-19 CVE-2018-0237 Use of Incorrectly-Resolved Name or Reference vulnerability in Cisco Advanced Malware Protection FOR Endpoints 1.4(5)
A vulnerability in the file type detection mechanism of the Cisco Advanced Malware Protection (AMP) for Endpoints macOS Connector could allow an unauthenticated, remote attacker to bypass malware detection.
network
low complexity
cisco CWE-706
5.0
2017-11-16 CVE-2017-12312 Improper Input Validation vulnerability in Cisco Advanced Malware Protection for Endpoints 3.1.0
An untrusted search path (aka DLL Preloading) vulnerability in the Cisco Immunet antimalware installer could allow an authenticated, local attacker to execute arbitrary code via DLL hijacking if a local user with administrative privileges executes the installer in the current working directory where a crafted DLL has been placed by an attacker.
local
low complexity
cisco CWE-20
7.2