Epolicy Orchestrator (Epo)
Approved changes feed: RSS · Atom
cpe:2.3:a:mcafee:epolicy_orchestrator_(epo):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mcafee (b3716737-1d68-5e90-9de7-ce927cce9af4) |
|---|---|
| Product | Epolicy Orchestrator (Epo) (bed6ffb5-ae1a-532e-8e36-87d33905f3b4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-6672 |
vulnerable | 2026-06-08 05:11:54.105529 |
SB10240 - ePolicy Orchestrator (ePO) - Information disclosure vulnerablity
MEDIUM (5.7)
Information disclosure vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows authenticated users to view sensitive information in plain text format via unspecified vectors.
Published: 2018-06-15T14:00:00.000Z
Updated: 2024-08-05T06:10:11.360Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6671 |
vulnerable | 2026-06-08 05:11:54.104008 |
SB10240 - ePolicy Orchestrator (ePO) - Application Protection Bypass vulnerability
MEDIUM (4.7)
Application Protection Bypass vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows remote authenticated users to bypass localhost only access security protection for some ePO features via a specially crafted HTTP request.
Published: 2018-06-15T14:00:00.000Z
Updated: 2024-08-05T06:10:11.361Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6660 |
vulnerable | 2026-06-08 05:11:54.090722 |
SB10228 ePO Directory Traversal vulnerability
MEDIUM (6.2)
Directory Traversal vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data streams, which could be used to bypass the file extensions, via not properly validating the path when exporting a particular XML file.
Published: 2018-04-02T13:00:00.000Z
Updated: 2024-09-16T22:40:52.250Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6659 |
vulnerable | 2026-06-08 05:11:54.087433 |
SB10228 ePO Reflected Cross-Site Scripting vulnerability
LOW (3.7)
Reflected Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows remote authenticated users to exploit an XSS issue via not sanitizing the user input.
Published: 2018-04-02T17:00:00.000Z
Updated: 2024-09-16T16:23:29.064Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-3980 |
vulnerable | 2026-06-08 05:09:38.199218 |
Details available
A directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, and 5.1.3 and earlier allows remote authenticated users to execute a command of their choice via an authenticated ePO session.
Published: 2017-05-18T19:00:00.000Z
Updated: 2024-08-05T14:39:41.155Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-3936 |
vulnerable | 2026-06-08 05:09:38.182925 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.