GCVE - cpe:2.3:a:mcafee:epolicy_orchestrator:2.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:epolicy_orchestrator:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

Vendor	Mcafee (`b3716737-1d68-5e90-9de7-ce927cce9af4`)
Product	Epolicy Orchestrator (`be35d1ef-d3f3-5ed1-bb36-a209c80484ae`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-0141`	vulnerable	2026-06-08 05:03:01.814020	Details available Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory. Published: 2013-05-01T10:00:00.000Z Updated: 2024-08-06T14:18:08.399Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/209131 https://kc.mcafee.com/corporate/index?page=content&id=SB10042 http://www.us-cert.gov/ncas/alerts/TA13-193A http://seclists.org/fulldisclosure/2014/Apr/289	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0140`	vulnerable	2026-06-08 05:03:01.807053	Details available SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel. Published: 2013-05-01T10:00:00.000Z Updated: 2024-08-06T14:18:09.165Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/209131 https://kc.mcafee.com/corporate/index?page=content&id=SB10042 http://www.us-cert.gov/ncas/alerts/TA13-193A http://www.securityfocus.com/bid/59500 http://seclists.org/fulldisclosure/2014/Apr/289	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4594`	vulnerable	2026-06-08 05:02:51.597934	Details available McAfee ePolicy Orchestrator (ePO) 4.6.1 and earlier allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information from arbitrary reporting panels, via a modified ID value in a console URL. Published: 2012-08-22T10:00:00.000Z Updated: 2024-08-06T20:42:54.907Z Open on db.gcve.eu Reference links https://kc.mcafee.com/corporate/index?page=content&id=SB10025 https://exchange.xforce.ibmcloud.com/vulnerabilities/78132	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0616`	vulnerable	2026-06-08 04:47:22.009259	Details available Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request with format strings in the computerlist parameter, which are used when logging a failed name resolution. Published: 2003-08-01T04:00:00.000Z Updated: 2024-08-08T01:58:11.105Z Open on db.gcve.eu Reference links http://www.atstake.com/research/advisories/2003/a073103-1.txt http://www.nai.com/us/promos/mcafee/epo_vulnerabilities.asp	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0149`	vulnerable	2026-06-08 04:47:20.821163	Details available Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long parameters. Published: 2003-08-01T04:00:00.000Z Updated: 2024-08-08T01:43:35.907Z Open on db.gcve.eu Reference links http://www.atstake.com/research/advisories/2003/a073103-1.txt http://www.nai.com/us/promos/mcafee/epo_vulnerabilities.asp	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0148`	vulnerable	2026-06-08 04:47:20.818407	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.