Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.3:*:*:*:*:*:*:*

part: a version: 5.1.3 update: *

VendorMcafee (b3716737-1d68-5e90-9de7-ce927cce9af4)
ProductEpolicy Orchestrator (be35d1ef-d3f3-5ed1-bb36-a209c80484ae)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-3936 vulnerable 2026-06-08 05:09:38.183039 McAfee ePolicy Orchestrator (ePO) - OS Command Injection vulnerability
MEDIUM (6.2)
OS Command Injection vulnerability in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows attackers to run arbitrary OS commands with limited privileges via not sanitizing the user input data before exporting it into a CSV format output.
Published: 2018-06-13T21:00:00.000Z
Updated: 2024-08-05T14:39:41.148Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3902 vulnerable 2026-06-08 05:09:38.168699 Details available
Cross-site scripting (XSS) vulnerability in the Web user interface (UI) in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authenticated users to inject malicious Java scripts via bypassing input validation.
Published: 2017-02-13T16:00:00.000Z
Updated: 2024-08-05T14:39:41.329Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.