27 matches found
PT-2019-2806
Name of the Vulnerable Software and Affected Versions McAfee ePolicy Orchestrator versions 5.9.x through 5.10.0 prior to update 4 Description The issue is related to a lack of protection for service data in the Agent Handler component of McAfee ePolicy Orchestrator. This can be exploited by a...
McAfee ePolicy Orchestrator 4.6.x Multiple Vulnerabilities (SB10042)
According to its self-reported version, the version of McAfee ePolicy Orchestrator running on the remote host has the following vulnerabilities : - An unspecified SQL injection vulnerability exists in the Agent-Handler component. A remote, unauthenticated attacker could exploit this to execute...
CVE-2013-0140
SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator ePO before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel...
CVE-2013-0140
SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator ePO before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel...
CVE-2013-0140
SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator ePO before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel...
CVE-2013-0140: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator ePO before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel...
PT-2013-2126
Name of the Vulnerable Software and Affected Versions McAfee ePolicy Orchestrator ePO versions prior to 4.5.7 McAfee ePolicy Orchestrator ePO versions 4.6.x prior to 4.6.6 Description A SQL injection issue exists in the Agent-Handler component, allowing remote attackers to execute arbitrary SQL...