A XML Extended entity vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) before 5.10 Update 13 allows a remote administrator malicious user to upload a malicious XML file through the extension import functionality. The impact is limited to some access to confidential information and some ability to alter data.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
mcafee epolicy orchestrator 5.10.0 |
||
mcafee epolicy orchestrator |
Vulmon