CVE-2014-2205
published 2014-02-26CVE-2014-2205: The Import and Export Framework in McAfee ePolicy Orchestrator (ePO) before 4.6.7 Hotfix 940148 allows remote authenticated users with permissions to add…
PriorityP433medium6.3CVSS 2.0
AVNACMAuSCCINAN
EPSS
2.00%
78.3th percentile
The Import and Export Framework in McAfee ePolicy Orchestrator (ePO) before 4.6.7 Hotfix 940148 allows remote authenticated users with permissions to add dashboards to read arbitrary files by importing a crafted XML file, related to an XML External Entity (XXE) issue.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mcafee | epolicy_orchestrator | <= 4.6.7 | — |
| mcafee | epolicy_orchestrator | — | — |
| mcafee | epolicy_orchestrator | — | — |
| mcafee | epolicy_orchestrator | — | — |
| mcafee | epolicy_orchestrator | — | — |
| mcafee | epolicy_orchestrator | — | — |
| mcafee | epolicy_orchestrator | — | — |
| mcafee | epolicy_orchestrator | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/57114http://www.securityfocus.com/archive/1/531255/100/0/threadedhttp://www.securityfocus.com/bid/65771https://kc.mcafee.com/corporate/index?page=content&id=SB10065https://www.redteam-pentesting.de/advisories/rt-sa-2014-001.txthttp://secunia.com/advisories/57114http://www.securityfocus.com/archive/1/531255/100/0/threadedhttp://www.securityfocus.com/bid/65771https://kc.mcafee.com/corporate/index?page=content&id=SB10065https://www.redteam-pentesting.de/advisories/rt-sa-2014-001.txt
2014-02-26
Published