McAfee ePolicy Orchestrator 4.5.3
Approved changes feed: RSS · Atom
cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.3:*:*:*:*:*:*:*
part: a version: 4.5.3 update: *
| Vendor | Mcafee (b3716737-1d68-5e90-9de7-ce927cce9af4) |
|---|---|
| Product | Epolicy Orchestrator (be35d1ef-d3f3-5ed1-bb36-a209c80484ae) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-2859 |
vulnerable | 2026-06-08 05:06:36.053702 |
Details available
Intel McAfee ePolicy Orchestrator (ePO) 4.x through 4.6.9 and 5.x through 5.1.2 does not validate server names and Certification Authority names in X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Published: 2015-06-23T21:00:00.000Z
Updated: 2024-08-06T05:24:39.120Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0141 |
vulnerable | 2026-06-08 05:03:01.814212 |
Details available
Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory.
Published: 2013-05-01T10:00:00.000Z
Updated: 2024-08-06T14:18:08.399Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0140 |
vulnerable | 2026-06-08 05:03:01.809417 |
Details available
SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel.
Published: 2013-05-01T10:00:00.000Z
Updated: 2024-08-06T14:18:09.165Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.