McAfee ePolicy Orchestrator 5.3.0
Approved changes feed: RSS · Atom
cpe:2.3:a:mcafee:epolicy_orchestrator:5.3.0:*:*:*:*:*:*:*
part: a version: 5.3.0 update: *
| Vendor | Mcafee (b3716737-1d68-5e90-9de7-ce927cce9af4) |
|---|---|
| Product | Epolicy Orchestrator (be35d1ef-d3f3-5ed1-bb36-a209c80484ae) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-6660 |
vulnerable | 2026-06-08 05:11:54.090856 |
SB10228 ePO Directory Traversal vulnerability
MEDIUM (6.2)
Directory Traversal vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data streams, which could be used to bypass the file extensions, via not properly validating the path when exporting a particular XML file.
Published: 2018-04-02T13:00:00.000Z
Updated: 2024-09-16T22:40:52.250Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6659 |
vulnerable | 2026-06-08 05:11:54.088250 |
SB10228 ePO Reflected Cross-Site Scripting vulnerability
LOW (3.7)
Reflected Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows remote authenticated users to exploit an XSS issue via not sanitizing the user input.
Published: 2018-04-02T17:00:00.000Z
Updated: 2024-09-16T16:23:29.064Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.