Mcafee Epolicy Orchestrator vulnerabilities

85 known vulnerabilities affecting mcafee/epolicy_orchestrator.

Total CVEs

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

CRITICAL5HIGH16MEDIUM46LOW18

Vulnerabilities

Page 4 of 5

CVE-2017-3980HIGHCVSS 7.2≤ 5.1.3≥ 5.3.0, ≤ 5.3.3+4 more2017-05-18

CVE-2017-3980 [HIGH] CWE-22 CVE-2017-3980: A directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator (ePO) 5.9.0, A directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, and 5.1.3 and earlier allows remote authenticated users to execute a command of their choice via an authenticated ePO session.

cvelistv5nvd

CVE-2016-8027CRITICALCVSS 10.0≥ 5.1.0, ≤ 5.1.3≥ 5.3.0, ≤ 5.3.22017-03-14

CVE-2016-8027 [CRITICAL] CWE-89 CVE-2016-8027: SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3 SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier allows attackers to alter a SQL query, which can result in disclosure of information within the database or impersonation of an agent without authentication via a specially crafted HTTP post.

nvd

CVE-2017-3902MEDIUMCVSS 5.4v5.1.0v5.1.1+2 more2017-02-13

CVE-2017-3902 [MEDIUM] CWE-79 CVE-2017-3902: Cross-site scripting (XSS) vulnerability in the Web user interface (UI) in Intel Security ePO 5.1.3, Cross-site scripting (XSS) vulnerability in the Web user interface (UI) in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authenticated users to inject malicious Java scripts via bypassing input validation.

nvd

CVE-2015-8765HIGHCVSS 8.3≤ 4.6.9≥ 5.0.0, ≤ 5.0.1+2 more2016-01-08

CVE-2015-8765 [HIGH] CVE-2015-8765: Intel McAfee ePolicy Orchestrator (ePO) 4.6.9 and earlier, 5.0.x, 5.1.x before 5.1.3 Hotfix 1106041, Intel McAfee ePolicy Orchestrator (ePO) 4.6.9 and earlier, 5.0.x, 5.1.x before 5.1.3 Hotfix 1106041, and 5.3.x before 5.3.1 Hotfix 1106041 allow remote attackers to execute arbitrary code via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

nvd

CVE-2015-2859MEDIUMCVSS 5.8v4.0v4.5.0+20 more2015-06-23

CVE-2015-2859 [MEDIUM] CWE-310 CVE-2015-2859: Intel McAfee ePolicy Orchestrator (ePO) 4.x through 4.6.9 and 5.x through 5.1.2 does not validate se Intel McAfee ePolicy Orchestrator (ePO) 4.x through 4.6.9 and 5.x through 5.1.2 does not validate server names and Certification Authority names in X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

nvd

CVE-2015-4559MEDIUMCVSS 4.3≤ 5.1.12015-06-15

CVE-2015-4559 [MEDIUM] CWE-79 CVE-2015-4559: Cross-site scripting (XSS) vulnerability in the product deployment feature in the Java core web serv Cross-site scripting (XSS) vulnerability in the product deployment feature in the Java core web services in Intel McAfee ePolicy Orchestrator (ePO) before 5.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

nvd

CVE-2015-0921MEDIUMCVSS 4.0≤ 4.6.8v5.0.0+3 more2015-01-09

CVE-2015-0921 [MEDIUM] CVE-2015-0921: XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 allows remote authenticated users to read arbitrary files via the conditionXML parameter to the taskLogTable to orionUpdateTableFilter.do.

nvd

CVE-2015-0922MEDIUMCVSS 5.0≤ 4.6.8v5.0.0+3 more2015-01-09

CVE-2015-0922 [MEDIUM] CWE-200 CVE-2015-0922: McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 uses the same secret key across McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 uses the same secret key across different customers' installations, which allows attackers to obtain the administrator password by leveraging knowledge of the encrypted password.

nvd

CVE-2014-2205MEDIUMCVSS 6.3≤ 4.6.7v4.6.0+6 more2014-02-26

CVE-2014-2205 [MEDIUM] CWE-264 CVE-2014-2205: The Import and Export Framework in McAfee ePolicy Orchestrator (ePO) before 4.6.7 Hotfix 940148 allo The Import and Export Framework in McAfee ePolicy Orchestrator (ePO) before 4.6.7 Hotfix 940148 allows remote authenticated users with permissions to add dashboards to read arbitrary files by importing a crafted XML file, related to an XML External Entity (XXE) issue.

nvd

CVE-2013-4883MEDIUMCVSS 4.3PoC≤ 4.6.6v4.6.0+5 more2013-07-22

CVE-2013-4883 [MEDIUM] CWE-79 CVE-2013-4883: Multiple cross-site scripting (XSS) vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier Multiple cross-site scripting (XSS) vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePO Extension for the McAfee Agent (MA) 4.5 through 4.6, allow remote attackers to inject arbitrary web script or HTML via the (1) instanceId parameter core/loadDisplayType.do; (2) instanceId or (3) monitorUrl parameter to console/createDashboa

nvd

CVE-2013-4882MEDIUMCVSS 6.5PoC≤ 4.6.6v4.6.0+5 more2013-07-22

CVE-2013-4882 [MEDIUM] CVE-2013-4882: Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePo Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePolicy Orchestrator (ePO) extension for McAfee Agent (MA) 4.5 and 4.6, allow remote authenticated users to execute arbitrary SQL commands via the uid parameter to (1) core/showRegisteredTypeDetails.do and (2) EPOAGENTMETA/DisplayMSAPropsDetail.do, a different vul

nvd

CVE-2013-0140HIGHCVSS 7.9PoC≤ 4.5.6v2.0+17 more2013-05-01

CVE-2013-0140 [HIGH] CWE-89 CVE-2013-0140: SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator (ePO) befo SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel.

nvd

CVE-2013-0141MEDIUMCVSS 4.3≤ 4.5.6v2.0+17 more2013-05-01

CVE-2013-0141 [MEDIUM] CWE-22 CVE-2013-0141: Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory.

nvd

CVE-2012-4594MEDIUMCVSS 4.0≤ 4.6.1v2.0+9 more2012-08-22

CVE-2012-4594 [MEDIUM] CWE-264 CVE-2012-4594: McAfee ePolicy Orchestrator (ePO) 4.6.1 and earlier allows remote authenticated users to bypass inte McAfee ePolicy Orchestrator (ePO) 4.6.1 and earlier allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information from arbitrary reporting panels, via a modified ID value in a console URL.

nvd

CVE-2008-1357MEDIUMCVSS 5.4PoCv4.02008-03-17

CVE-2008-1357 [MEDIUM] CWE-134 CVE-2008-1357: Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agen Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (Patch 3) and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in a sender field in an AgentWakeup request to

nvd

CVE-2006-5274HIGHCVSS 7.6v3.5.0v3.6.02007-07-12

CVE-2006-5274 [HIGH] CVE-2006-5274: Integer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, an Integer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 allows remote attackers to cause a denial of service (CMA Framework service crash) and possibly execute arbitrary code via unspecified vectors.

nvd

CVE-2007-1498CRITICALCVSS 9.3v3.5.0v3.6.0+1 more2007-03-16

CVE-2007-1498 [CRITICAL] CVE-2007-1498: Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control (SiteManager.dll) Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control (SiteManager.dll) in the ePO management console in McAfee ePolicy Orchestrator (ePO) before 3.6.1 Patch 1 and ProtectionPilot (PRP) before 1.5.0 HotFix allow remote attackers to execute arbitrary code via a long argument to the (1) ExportSiteList and (2) VerifyPackageCatalog

nvd

CVE-2006-5156CRITICALCVSS 10.0PoCv3.0v3.5.02006-10-05

CVE-2006-5156 [CRITICAL] CVE-2006-5156: Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attackers to execute arbitrary code via a request to /spipe/pkg/ with a long source header.

nvd

CVE-2004-0038HIGHCVSS 7.5v2.5v2.5.1+1 more2004-06-14

CVE-2004-0038 [HIGH] CVE-2004-0038: McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to exe McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81.

nvd

CVE-2004-0095MEDIUMCVSS 5.0PoCv3.6.02004-02-17

CVE-2004-0095 [MEDIUM] CVE-2004-0095: McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory consu McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory consumption and crash) and possibly execute arbitrary code via an HTTP POST request with an invalid Content-Length value, possibly triggering a buffer overflow.

nvd

← Previous4 / 5Next →