Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

mcafee epolicy orchestrator 5.9.0 vulnerabilities and exploits

(subscribe to this query)
4
CVSSv2

CVE-2019-3619

Information Disclosure vulnerability in the Agent Handler in McAfee ePolicy Orchestrator (ePO) 5.9.x and 5.10.0 before 5.10.0 update 4 allows remote unauthenticated malicious user to view sensitive information in plain text via sniffing the traffic between the Agent Handler and t...
Mcafee Epolicy Orchestrator 5.9.0Mcafee Epolicy Orchestrator 5.9.1Mcafee Epolicy Orchestrator 5.10.0
3.5
CVSSv2

CVE-2018-6659

Reflected Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows remote authenticated users to exploit an XSS issue via not sanitizing the user input.
Mcafee Epolicy Orchestrator 5.3.0Mcafee Epolicy Orchestrator 5.3.1Mcafee Epolicy Orchestrator 5.3.2Mcafee Epolicy Orchestrator 5.9.0
4
CVSSv2

CVE-2018-6660

Directory Traversal vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data streams, which could be used to bypass the file extensions, via not properly validating the path when exporting a particular XM...
Mcafee Epolicy Orchestrator 5.3.0Mcafee Epolicy Orchestrator 5.3.1Mcafee Epolicy Orchestrator 5.3.2Mcafee Epolicy Orchestrator 5.9.0
7.5
CVSSv2

CVE-2017-3936

OS Command Injection vulnerability in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows malicious users to run arbitrary OS commands with limited privileges via not sanitizing the user input data before exporting it into a CSV format out...
Mcafee Epolicy Orchestrator 5.1.0Mcafee Epolicy Orchestrator 5.1.1Mcafee Epolicy Orchestrator 5.1.2Mcafee Epolicy Orchestrator 5.1.3Mcafee Epolicy Orchestrator 5.3.1Mcafee Epolicy Orchestrator 5.3.2Mcafee Epolicy Orchestrator 5.9.0
4.3
CVSSv2

CVE-2019-2842

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JCE). The supported version that is affected is Java SE: 8u212. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful ...
Oracle Jdk 1.8.0Oracle Jre 1.8.0Opensuse Leap 15.0Opensuse Leap 15.1Hp Xp7 Command ViewMcafee Epolicy Orchestrator 5.9.0Mcafee Epolicy Orchestrator 5.9.1Mcafee Epolicy Orchestrator 5.10.0Canonical Ubuntu Linux 16.04
4.3
CVSSv2

CVE-2019-2933

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network...
Oracle Jdk 1.7.0Oracle Jdk 1.8.0Oracle Jdk 11.0.4Oracle Jdk 13.0.0Oracle Jre 1.7.0Oracle Jre 1.8.0Oracle Jre 11.0.4Oracle Jre 13.0.0Opensuse Leap 15.0Opensuse Leap 15.1Debian Debian Linux 8.0Mcafee Epolicy Orchestrator 5.9.0
2.6
CVSSv2

CVE-2019-2766

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker wi...
Oracle Jdk 1.7.0Oracle Jdk 1.8.0Oracle Jdk 11.0.3Oracle Jdk 12.0.1Oracle Jre 1.7.0Oracle Jre 1.8.0Oracle Jre 11.0.3Oracle Jre 12.0.1Mcafee Epolicy Orchestrator 5.9.0Mcafee Epolicy Orchestrator 5.9.1Mcafee Epolicy Orchestrator 5.10.0Hp Xp7 Command View
1.9
CVSSv2

CVE-2019-2745

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes...
Oracle Jdk 1.7.0Oracle Jdk 1.8.0Oracle Jdk 11.0.3Oracle Jre 1.7.0Oracle Jre 1.8.0Oracle Jre 11.0.3Debian Debian Linux 8.0Canonical Ubuntu Linux 16.04Opensuse Leap 15.0Opensuse Leap 15.1Mcafee Epolicy Orchestrator 5.9.0Mcafee Epolicy Orchestrator 5.9.1
4.3
CVSSv2

CVE-2019-2894

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network ...
Oracle Jdk 1.7.0Oracle Jdk 1.8.0Oracle Jdk 11.0.4Oracle Jdk 13.0.0Oracle Jre 1.7.0Oracle Jre 1.8.0Oracle Jre 11.0.4Oracle Jre 13.0.0Debian Debian Linux 8.0Debian Debian Linux 9.0Opensuse Leap 15.0Opensuse Leap 15.1
4
CVSSv2

CVE-2018-6672

Information disclosure vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 up to and including 5.3.3 and 5.9.0 up to and including 5.9.1 allows authenticated users to view sensitive information in plain text format via unspecified vectors.
Mcafee Epolicy Orchestrator
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
SQL injectionCVE-2024-52320SQLlogic flawCVE-2024-6387CVE-2024-11457CVE-2024-11329CVE-2024-50404CVE-2023-48788
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook