mcafee epolicy orchestrator 5.10.0 vulnerabilities and exploits

(subscribe to this query)

3.5

CVSSv2

Stored Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) before 5.10 Update 11 allows ePO administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized.

Mcafee Epolicy Orchestrator 5.10.0 Mcafee Epolicy Orchestrator

3.5

CVSSv2

Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) before 5.10 Update 10 allows ePO administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized.

Mcafee Epolicy Orchestrator 5.10.0 Mcafee Epolicy Orchestrator

4.3

CVSSv2

Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) before 5.10 Update 11 allows ePO administrators to inject arbitrary web script or HTML via a specific parameter where the administrator's entries were not correctly sanitized.

Mcafee Epolicy Orchestrator 5.10.0 Mcafee Epolicy Orchestrator

4.4

CVSSv2

McAfee Enterprise ePolicy Orchestrator (ePO) before 5.10 Update 13 allows a local malicious user to point an ePO server to an arbitrary SQL server during the restoration of the ePO server. To achieve this the attacker would have to be logged onto the server hosting the ePO server...

Mcafee Epolicy Orchestrator 5.10.0 Mcafee Epolicy Orchestrator

4.3

CVSSv2

A lack of password change protection vulnerability in a depreciated API of McAfee Enterprise ePolicy Orchestrator (ePO) before 5.10 Update 13 allows a remote malicious user to change the password of a compromised session without knowing the existing user's password. This fun...

Mcafee Epolicy Orchestrator 5.10.0 Mcafee Epolicy Orchestrator

NA

A reflected cross-site scripting (XSS) vulnerability in ePO before 5.10 SP1 Update 1allows a remote unauthenticated malicious user to potentially obtain access to an ePO administrator's session by convincing the authenticated ePO administrator to click on a carefully crafte...

Mcafee Epolicy Orchestrator 5.10.0 Mcafee Epolicy Orchestrator

4.9

CVSSv2

Unvalidated client-side URL redirect vulnerability in McAfee ePolicy Orchestrator (ePO) before 5.10 Update 10 could cause an authenticated ePO user to load an untrusted site in an ePO iframe which could steal information from the authenticated user.

Mcafee Epolicy Orchestrator 5.10.0 Mcafee Epolicy Orchestrator

5.8

CVSSv2

Information leak vulnerability in the Agent Handler of McAfee ePolicy Orchestrator (ePO) before 5.10 Update 10 allows an unauthenticated user to download McAfee product packages (specifically McAfee Agent) available in ePO repository and install them on their own machines to have...

Mcafee Epolicy Orchestrator 5.10.0 Mcafee Epolicy Orchestrator

4

CVSSv2

A blind SQL injection vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) before 5.10 Update 13 allows a remote authenticated malicious user to potentially obtain information from the ePO database. The data obtained is dependent on the privileges the attacker has and to...

Mcafee Epolicy Orchestrator 5.10.0 Mcafee Epolicy Orchestrator

4.3

CVSSv2

A reflected cross-site scripting (XSS) vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) before 5.10 Update 13 allows a remote malicious user to potentially obtain access to an ePO administrator's session by convincing the malicious user to click on a carefully c...

Mcafee Epolicy Orchestrator 5.10.0 Mcafee Epolicy Orchestrator

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook