Skip to content
OpenAdvisories

Product · McAfee

ePolicy Orchestrator (ePO)

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.7
    CVE-2018-6672

    SB10240 - ePolicy Orchestrator (ePO) - Information disclosure vulnerablity

    Information disclosure vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows authenticated users to view sensitive information in plain text format via unspecified vectors.

    McAfee ePolicy Orchestrator (ePO)
  • Medium 4.7
    CVE-2018-6671 Public exploit

    SB10240 - ePolicy Orchestrator (ePO) - Application Protection Bypass vulnerability

    Application Protection Bypass vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows remote authenticated users to bypass localhost only access security protection for some ePO features via a specially crafted HT…

    McAfee ePolicy Orchestrator (ePO)
  • Medium 6.2
    CVE-2017-3936

    McAfee ePolicy Orchestrator (ePO) - OS Command Injection vulnerability

    OS Command Injection vulnerability in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows attackers to run arbitrary OS commands with limited privileges via not sanitizing the user input data before exporting it into a…

    McAfee ePolicy Orchestrator (ePO)
  • Medium 6.2
    CVE-2018-6660

    SB10228 ePO Directory Traversal vulnerability

    Directory Traversal vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data streams, which could be used to bypass the file extensions, via not properly validating the path when expo…

    McAfee ePolicy Orchestrator (ePO)