CVE-2013-0140

2013-05-0112:00:00

CWE-89

[email protected]

web.nvd.nist.gov

cve-2013-0140

sql injection

vulnerability

mcafee epo

security

nvd

8.1 High

AI Score

Confidence

Low

7.9 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

67.7%

JSON

SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel.

CPENameOperatorVersion
mcafee:epolicy_orchestratormcafee epolicy orchestratoreq2.5.1
mcafee:epolicy_orchestratormcafee epolicy orchestratoreq4.5.4
mcafee:epolicy_orchestratormcafee epolicy orchestratoreq3.0
mcafee:epolicy_orchestratormcafee epolicy orchestratorle4.5.6
mcafee:epolicy_orchestratormcafee epolicy orchestratoreq2.5
mcafee:epolicy_orchestratormcafee epolicy orchestratoreq4.5.0
mcafee:epolicy_orchestratormcafee epolicy orchestratoreq4.0
mcafee:epolicy_orchestratormcafee epolicy orchestratoreq3.6.0
mcafee:epolicy_orchestratormcafee epolicy orchestratoreq4.5.5
mcafee:epolicy_orchestratormcafee epolicy orchestratoreq3.5.0

CPE	Name	Operator	Version
mcafee:epolicy_orchestrator	mcafee epolicy orchestrator	eq	2.5.1
mcafee:epolicy_orchestrator	mcafee epolicy orchestrator	eq	4.5.4
mcafee:epolicy_orchestrator	mcafee epolicy orchestrator	eq	3.0
mcafee:epolicy_orchestrator	mcafee epolicy orchestrator	le	4.5.6
mcafee:epolicy_orchestrator	mcafee epolicy orchestrator	eq	2.5
mcafee:epolicy_orchestrator	mcafee epolicy orchestrator	eq	4.5.0
mcafee:epolicy_orchestrator	mcafee epolicy orchestrator	eq	4.0
mcafee:epolicy_orchestrator	mcafee epolicy orchestrator	eq	3.6.0
mcafee:epolicy_orchestrator	mcafee epolicy orchestrator	eq	4.5.5
mcafee:epolicy_orchestrator	mcafee epolicy orchestrator	eq	3.5.0