McAfee ePolicy Orchestrator 5.1.2
Approved changes feed: RSS · Atom
cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.2:*:*:*:*:*:*:*
part: a version: 5.1.2 update: *
| Vendor | Mcafee (b3716737-1d68-5e90-9de7-ce927cce9af4) |
|---|---|
| Product | Epolicy Orchestrator (be35d1ef-d3f3-5ed1-bb36-a209c80484ae) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-3936 |
vulnerable | 2026-06-08 05:09:38.183020 |
McAfee ePolicy Orchestrator (ePO) - OS Command Injection vulnerability
MEDIUM (6.2)
OS Command Injection vulnerability in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows attackers to run arbitrary OS commands with limited privileges via not sanitizing the user input data before exporting it into a CSV format output.
Published: 2018-06-13T21:00:00.000Z
Updated: 2024-08-05T14:39:41.148Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-3902 |
vulnerable | 2026-06-08 05:09:38.167799 |
Details available
Cross-site scripting (XSS) vulnerability in the Web user interface (UI) in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authenticated users to inject malicious Java scripts via bypassing input validation.
Published: 2017-02-13T16:00:00.000Z
Updated: 2024-08-05T14:39:41.329Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2859 |
vulnerable | 2026-06-08 05:06:36.064522 |
Details available
Intel McAfee ePolicy Orchestrator (ePO) 4.x through 4.6.9 and 5.x through 5.1.2 does not validate server names and Certification Authority names in X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Published: 2015-06-23T21:00:00.000Z
Updated: 2024-08-06T05:24:39.120Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.