Published: 22/07/2013 Updated: 22/08/2013

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

VMScore: 655

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and previous versions, and the ePolicy Orchestrator (ePO) extension for McAfee Agent (MA) 4.5 and 4.6, allow remote authenticated users to execute arbitrary SQL commands via the uid parameter to (1) core/showRegisteredTypeDetails.do and (2) EPOAGENTMETA/DisplayMSAPropsDetail.do, a different vulnerability than CVE-2013-0140.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mcafee epolicy orchestrator 4.6.5
mcafee epolicy orchestrator 4.6.4
mcafee epolicy orchestrator
mcafee epolicy orchestrator agent 4.5
mcafee epolicy orchestrator 4.6.3
mcafee epolicy orchestrator 4.6.2
mcafee epolicy orchestrator agent 4.6
mcafee epolicy orchestrator 4.6.0
mcafee epolicy orchestrator 4.6.1

Classification: NON SENSITIVE INFORMATION RELEASABLE TO THE PUBLIC Multiple vulnerabilities in McAfee ePO 466 Affected Product: McAfee ePO 466 Build 176 & (potentially) earlier versions Timeline: 08 June 2013 - Vulnerability found 12 June 2013 - Vendor informed 12 June 2013 - Vendor replied/confirmed & opened serv ...

CWE-89 http://www.securityfocus.com/archive/1/527228 https://kc.mcafee.com/corporate/index?page=content&id=SB10043 http://www.securitytracker.com/id/1028803 https://nvd.nist.gov https://www.exploit-db.com/exploits/26807/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2013-4882

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect