GCVE - cpe:2.3:a:mcafee:epolicy_orchestrator:4.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:epolicy_orchestrator:4.0:*:*:*:*:*:*:*

part: a version: 4.0 update: *

Vendor	Mcafee (`b3716737-1d68-5e90-9de7-ce927cce9af4`)
Product	Epolicy Orchestrator (`be35d1ef-d3f3-5ed1-bb36-a209c80484ae`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-2859`	vulnerable	2026-06-08 05:06:36.052121	Details available Intel McAfee ePolicy Orchestrator (ePO) 4.x through 4.6.9 and 5.x through 5.1.2 does not validate server names and Certification Authority names in X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Published: 2015-06-23T21:00:00.000Z Updated: 2024-08-06T05:24:39.120Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/264092 https://kc.mcafee.com/corporate/index?page=content&id=SB10120 http://www.securityfocus.com/bid/75020 http://www.securitytracker.com/id/1032571 https://kc.mcafee.com/corporate/index?page=content&id=KB84628	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0141`	vulnerable	2026-06-08 05:03:01.814177	Details available Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory. Published: 2013-05-01T10:00:00.000Z Updated: 2024-08-06T14:18:08.399Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/209131 https://kc.mcafee.com/corporate/index?page=content&id=SB10042 http://www.us-cert.gov/ncas/alerts/TA13-193A http://seclists.org/fulldisclosure/2014/Apr/289	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0140`	vulnerable	2026-06-08 05:03:01.807220	Details available SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel. Published: 2013-05-01T10:00:00.000Z Updated: 2024-08-06T14:18:09.165Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/209131 https://kc.mcafee.com/corporate/index?page=content&id=SB10042 http://www.us-cert.gov/ncas/alerts/TA13-193A http://www.securityfocus.com/bid/59500 http://seclists.org/fulldisclosure/2014/Apr/289	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4594`	vulnerable	2026-06-08 05:02:51.603522	Details available McAfee ePolicy Orchestrator (ePO) 4.6.1 and earlier allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information from arbitrary reporting panels, via a modified ID value in a console URL. Published: 2012-08-22T10:00:00.000Z Updated: 2024-08-06T20:42:54.907Z Open on db.gcve.eu Reference links https://kc.mcafee.com/corporate/index?page=content&id=SB10025 https://exchange.xforce.ibmcloud.com/vulnerabilities/78132	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1357`	vulnerable	2026-06-08 04:50:20.067253	Details available Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (Patch 3) and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in a sender field in an AgentWakeup request to UDP port 8082. NOTE: this issue only exists when the debug level is 8. Published: 2008-03-17T17:00:00.000Z Updated: 2024-08-07T08:17:34.576Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/3748 https://knowledge.mcafee.com/article/234/615103_f.sal_public.html https://exchange.xforce.ibmcloud.com/vulnerabilities/41178 http://www.securitytracker.com/id?1019609 http://secunia.com/advisories/29337	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.