McAfee ePolicy Orchestrator 5.1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.0:*:*:*:*:*:*:*
part: a version: 5.1.0 update: *
| Vendor | Mcafee (b3716737-1d68-5e90-9de7-ce927cce9af4) |
|---|---|
| Product | Epolicy Orchestrator (be35d1ef-d3f3-5ed1-bb36-a209c80484ae) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-3936 |
vulnerable | 2026-06-08 05:09:38.182973 |
McAfee ePolicy Orchestrator (ePO) - OS Command Injection vulnerability
MEDIUM (6.2)
OS Command Injection vulnerability in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows attackers to run arbitrary OS commands with limited privileges via not sanitizing the user input data before exporting it into a CSV format output.
Published: 2018-06-13T21:00:00.000Z
Updated: 2024-08-05T14:39:41.148Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-3902 |
vulnerable | 2026-06-08 05:09:38.166458 |
Details available
Cross-site scripting (XSS) vulnerability in the Web user interface (UI) in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authenticated users to inject malicious Java scripts via bypassing input validation.
Published: 2017-02-13T16:00:00.000Z
Updated: 2024-08-05T14:39:41.329Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2859 |
vulnerable | 2026-06-08 05:06:36.063148 |
Details available
Intel McAfee ePolicy Orchestrator (ePO) 4.x through 4.6.9 and 5.x through 5.1.2 does not validate server names and Certification Authority names in X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Published: 2015-06-23T21:00:00.000Z
Updated: 2024-08-06T05:24:39.120Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0922 |
vulnerable | 2026-06-08 05:06:24.356966 |
Details available
McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 uses the same secret key across different customers' installations, which allows attackers to obtain the administrator password by leveraging knowledge of the encrypted password.
Published: 2015-01-09T18:00:00.000Z
Updated: 2024-08-06T04:26:11.339Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0921 |
vulnerable | 2026-06-08 05:06:24.355937 |
Details available
XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 allows remote authenticated users to read arbitrary files via the conditionXML parameter to the taskLogTable to orionUpdateTableFilter.do.
Published: 2015-01-09T18:00:00.000Z
Updated: 2024-08-06T04:26:11.415Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.