Lucene search
K

CVE-2022-0861

🗓️ 23 Mar 2022 14:25:19Reported by trellixType 
cve
 cve
🔗 web.nvd.nist.gov👁 2318 Views

A XML Extended entity vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows remote administrator attacker to upload a malicious XML file through the extension import functionality. The impact is limited to some access to confidential information and some ability to alter data

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2022-0861
23 Mar 202215:15
attackerkb
Circl
CVE-2022-0861
23 Mar 202217:28
circl
CNNVD
McAfee Epolicy Orchestrator 代码问题漏洞
22 Mar 202200:00
cnnvd
Cvelist
CVE-2022-0861 ePO XML extended entity vulnerability
23 Mar 202214:25
cvelist
EUVD
EUVD-2022-15903
3 Oct 202520:07
euvd
Tenable Nessus
McAfee ePolicy Orchestrator Multiple Vulnerabilities (SB10379)
30 Mar 202200:00
nessus
NCSC
Vulnerabilities fixed in McAfee ePolicy Orchestrator
24 Mar 202200:00
ncsc
NVD
CVE-2022-0861
23 Mar 202215:15
nvd
Prion
Design/Logic Flaw
23 Mar 202215:15
prion
Positive Technologies
PT-2022-13480 · Mcafee · Mcafee Enterprise Epolicy Orchestrator
23 Mar 202200:00
ptsecurity
Rows per page
NVD
Node
OROR
mcafeeepolicy_orchestratorMatch5.10.0update_1
OR
mcafeeepolicy_orchestratorMatch5.10.0update_10
OR
mcafeeepolicy_orchestratorMatch5.10.0update_11
OR
mcafeeepolicy_orchestratorMatch5.10.0update_12
OR
mcafeeepolicy_orchestratorMatch5.10.0update_2
OR
mcafeeepolicy_orchestratorMatch5.10.0update_3
OR
mcafeeepolicy_orchestratorMatch5.10.0update_4
OR
mcafeeepolicy_orchestratorMatch5.10.0update_5
OR
mcafeeepolicy_orchestratorMatch5.10.0update_6
OR
mcafeeepolicy_orchestratorMatch5.10.0update_7
OR
mcafeeepolicy_orchestratorMatch5.10.0update_8
OR
mcafeeepolicy_orchestratorMatch5.10.0update_9
[
  {
    "product": "McAfee ePolicy Orchestrator (ePO)",
    "vendor": "McAfee,LLC",
    "versions": [
      {
        "lessThan": "5.10 CU 13",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation