Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:epolicy_orchestrator:3.0:*:*:*:*:*:*:*

part: a version: 3.0 update: *

VendorMcafee (b3716737-1d68-5e90-9de7-ce927cce9af4)
ProductEpolicy Orchestrator (be35d1ef-d3f3-5ed1-bb36-a209c80484ae)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-0141 vulnerable 2026-06-08 05:03:01.814090 Details available
Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory.
Published: 2013-05-01T10:00:00.000Z
Updated: 2024-08-06T14:18:08.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0140 vulnerable 2026-06-08 05:03:01.807126 Details available
SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel.
Published: 2013-05-01T10:00:00.000Z
Updated: 2024-08-06T14:18:09.165Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4594 vulnerable 2026-06-08 05:02:51.600790 Details available
McAfee ePolicy Orchestrator (ePO) 4.6.1 and earlier allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information from arbitrary reporting panels, via a modified ID value in a console URL.
Published: 2012-08-22T10:00:00.000Z
Updated: 2024-08-06T20:42:54.907Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5156 vulnerable 2026-06-08 04:49:19.798175 Details available
Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attackers to execute arbitrary code via a request to /spipe/pkg/ with a long source header.
Published: 2006-10-03T23:00:00.000Z
Updated: 2024-08-07T19:41:04.880Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0038 vulnerable 2026-06-08 04:47:48.133097 Details available
McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81.
Published: 2004-04-30T04:00:00.000Z
Updated: 2024-08-08T00:01:23.638Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0610 vulnerable 2026-06-08 04:47:21.981640 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0148 vulnerable 2026-06-08 04:47:20.820769 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.