Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mcafee epolicy orchestrator agent vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-4882
Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and previous versions, and the ePolicy Orchestrator (ePO) extension for McAfee Agent (MA) 4.5 and 4.6, allow remote authenticated users to execute arbitrary SQL commands via the uid parameter to (1) core/...
Mcafee Epolicy Orchestrator 4.6.5Mcafee Epolicy Orchestrator 4.6.4Mcafee Epolicy OrchestratorMcafee Epolicy Orchestrator Agent 4.5Mcafee Epolicy Orchestrator 4.6.3Mcafee Epolicy Orchestrator 4.6.2Mcafee Epolicy Orchestrator Agent 4.6Mcafee Epolicy Orchestrator 4.6.0Mcafee Epolicy Orchestrator 4.6.1
NA
CVE-2013-4883
Multiple cross-site scripting (XSS) vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and previous versions, and the ePO Extension for the McAfee Agent (MA) 4.5 up to and including 4.6, allow remote malicious users to inject arbitrary web script or HTML via the (1) instanceId ...
Mcafee Epolicy Orchestrator 4.6.3Mcafee Epolicy Orchestrator 4.6.2Mcafee Epolicy Orchestrator Agent 4.6Mcafee Epolicy Orchestrator 4.6.0Mcafee Epolicy Orchestrator 4.6.1Mcafee Epolicy Orchestrator 4.6.5Mcafee Epolicy Orchestrator 4.6.4Mcafee Epolicy OrchestratorMcafee Epolicy Orchestrator Agent 4.5
NA
CVE-2013-0140
SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator (ePO) prior to 4.5.7 and 4.6.x prior to 4.6.6 allows remote malicious users to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel.
Mcafee Epolicy Orchestrator 3.6.1Mcafee Epolicy Orchestrator 3.6.0Mcafee Epolicy Orchestrator 2.0Mcafee Epolicy Orchestrator 4.5.5Mcafee Epolicy Orchestrator 3.0Mcafee Epolicy Orchestrator 2.5Mcafee Epolicy Orchestrator 3.5.0Mcafee Epolicy Orchestrator 4.5.4Mcafee Epolicy Orchestrator 4.5.3Mcafee Epolicy OrchestratorMcafee Epolicy Orchestrator 4.5.0Mcafee Epolicy Orchestrator 4.0Mcafee Epolicy Orchestrator 2.5.1Mcafee Epolicy Orchestrator 4.6.4Mcafee Epolicy Orchestrator 4.6.3Mcafee Epolicy Orchestrator 4.6.0Mcafee Epolicy Orchestrator 4.6.2Mcafee Epolicy Orchestrator 4.6.1Mcafee Epolicy Orchestrator 4.6.5
NA
CVE-2013-0141
Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 4.5.7 and 4.6.x prior to 4.6.6 allows remote malicious users to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ di...
Mcafee Epolicy Orchestrator 3.6.0Mcafee Epolicy Orchestrator 3.5.0Mcafee Epolicy Orchestrator 4.5.5Mcafee Epolicy Orchestrator 4.5.4Mcafee Epolicy Orchestrator 4.0Mcafee Epolicy Orchestrator 3.6.1Mcafee Epolicy Orchestrator 2.5Mcafee Epolicy Orchestrator 2.0Mcafee Epolicy Orchestrator 4.5.0Mcafee Epolicy Orchestrator 2.5.1Mcafee Epolicy Orchestrator 3.0Mcafee Epolicy Orchestrator 4.5.3Mcafee Epolicy OrchestratorMcafee Epolicy Orchestrator 4.6.4Mcafee Epolicy Orchestrator 4.6.3Mcafee Epolicy Orchestrator 4.6.1Mcafee Epolicy Orchestrator 4.6.5Mcafee Epolicy Orchestrator 4.6.0Mcafee Epolicy Orchestrator 4.6.2
NA
CVE-2006-3623
Directory traversal vulnerability in Framework Service component in McAfee ePolicy Orchestrator agent 3.5.0.x and previous versions allows remote malicious users to create arbitrary files via a .. (dot dot) in the directory and filename in a PropsResponse (PackageType) request.
Mcafee Epolicy Orchestrator Agent
NA
CVE-2006-5274
Integer overflow in McAfee ePolicy Orchestrator 3.5 up to and including 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 allows remote malicious users to cause a denial of service (CMA Framework service crash) and possibly execute arbitrary code v...
Mcafee Common Management Agent 3.6.0.438Mcafee Protectionpilot 1.5.0Mcafee Epolicy Orchestrator 3.5.0Mcafee Epolicy Orchestrator 3.6.0Mcafee Protectionpilot 1.1.1
4.9
CVSSv3
CVE-2019-3619
Information Disclosure vulnerability in the Agent Handler in McAfee ePolicy Orchestrator (ePO) 5.9.x and 5.10.0 before 5.10.0 update 4 allows remote unauthenticated malicious user to view sensitive information in plain text via sniffing the traffic between the Agent Handler and t...
Mcafee Epolicy Orchestrator 5.9.0Mcafee Epolicy Orchestrator 5.9.1Mcafee Epolicy Orchestrator 5.10.0
NA
CVE-2003-0149
Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote malicious users to execute arbitrary code via a POST request containing long parameters.
Mcafee Epolicy Orchestrator 2.5Mcafee Epolicy Orchestrator 2.0Mcafee Epolicy Orchestrator 2.5.1
6.5
CVSSv3
CVE-2021-23890
Information leak vulnerability in the Agent Handler of McAfee ePolicy Orchestrator (ePO) before 5.10 Update 10 allows an unauthenticated user to download McAfee product packages (specifically McAfee Agent) available in ePO repository and install them on their own machines to have...
Mcafee Epolicy Orchestrator 5.10.0Mcafee Epolicy Orchestrator
5.4
CVSSv3
CVE-2022-3338
An External XML entity (XXE) vulnerability in ePO before 5.10 Update 14 can lead to an unauthenticated remote malicious user to potentially trigger a Server Side Request Forgery attack. This can be exploited by mimicking the Agent Handler call to ePO and passing the carefully con...
Mcafee Epolicy Orchestrator 5.10.0Mcafee Epolicy Orchestrator
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
IMAPCVE-2024-4367server-side request forgeryinformation disclosureCVE-2024-34342CVE-2024-4281CVE-2024-3507CVE-2024-25560CVE-2024-34574
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook