McAfee Agent 5.x prior to 5.7.3 Multiple Vulnerabilities (SB10362)

The version of McAfee Agent, formerly McAfee ePolicy Orchestrator ePO Agent, installed on the remote host is 5.x prior to 5.7.3. It is, therefore, affected by the following vulnerabilities: - An improper privilege management vulnerability exists due to a local user having the ability to edit the...

CVE-2021-31832

Improper Neutralization of Input in the ePO administrator extension for McAfee Data Loss Prevention DLP Endpoint for Windows prior to 11.6.200 allows a remote ePO DLP administrator to inject JavaScript code into the alert configuration text field. This JavaScript will be executed when an end user...

McAfee Data Loss Prevention 跨站脚本漏洞

Mcafee McAfee Data Loss Prevention DLP is a data loss prevention suite from McAfee, Inc. that includes components such as McAfee DLP Monitor, McAfee DLP Endpoint, and provides event management and reporting, synchronization of local and cloud DLP policies, and more. A security vulnerability exist...

Cisco ACI Multi-Site Orchestrator (MSO) Detection

Binary data ciscoacimultisiteorchestratordetect.nbin...

多款Hewlett Packard Enterprise产品跨站脚本漏洞

Hewlett Packard Enterprise Integrated Lights-Out 4 iLO 4, etc. are products of Hewlett Packard Enterprise. Hewlett Packard Enterprise Integrated Lights-Out 4 is a remote control solution. Hewlett Packard Enterprise Integrated Lights-Out 5 iLO 5 is a remote control solution. Hewlett Packard...

多款Hewlett Packard Enterprise产品跨站脚本漏洞

Hewlett Packard Enterprise Integrated Lights-Out 5 iLO 5, among others, is a product of Hewlett Packard Enterprise HPE in the U.S. Hewlett Packard Enterprise Integrated Lights-Out 5 is a remote control solution. Out 5 is a remote control solution. Hewlett Packard Enterprise HPE Orchestrator is a...

多款Hewlett Packard Enterprise产品跨站脚本漏洞

Hewlett Packard Enterprise Integrated Lights-Out 4 iLO 4, etc. are products of Hewlett Packard Enterprise. Hewlett Packard Enterprise Integrated Lights-Out 4 is a remote control solution. Hewlett Packard Enterprise Integrated Lights-Out 5 iLO 5 is a remote control solution. Hewlett Packard...

多款Hewlett Packard Enterprise产品跨站脚本漏洞

Hewlett Packard Enterprise Integrated Lights-Out 5 iLO 5, among others, is a product of Hewlett Packard Enterprise HPE in the U.S. Hewlett Packard Enterprise Integrated Lights-Out 5 is a remote control solution. Out 5 is a remote control solution. Hewlett Packard Enterprise HPE Orchestrator is a...

多款Hewlett Packard Enterprise产品安全漏洞

Hewlett Packard Enterprise Integrated Lights-Out 4 iLO 4, etc. are products of Hewlett Packard Enterprise. Hewlett Packard Enterprise Integrated Lights-Out 4 is a remote control solution. Hewlett Packard Enterprise Integrated Lights-Out 5 iLO 5 is a remote control solution. Hewlett Packard...

Security Bulletin: A vulnerability in IBM® SDK, Java™ Technology Edition may affect IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise

Summary A vulnerability in IBM® SDK Java™ Technology Edition, Version 8.0.5.40 used by IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise. CVE-2020-14781 was disclosed as part of the Oracle October 2020 Critical Patch Update. Vulnerability Details CVEID: CVE-2020-14781 DESCRIPTION: An...

Security Bulletin: Multiple vulnerabilities in IBM® SDK, Java™ Technology Edition may affect IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise

Summary Multiple vulnerabilities were found in IBM® SDK Java™ Technology Edition, Version 8.0.5.40 used by IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise. The issues were disclosed in the Oracle January 2021 Critical Patch Update, plus CVE-2020-27221. Vulnerability Details CVEID:...

Security Bulletin: Multiple vulnerabilities in Db2 affect IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise

Summary IBM® Db2® shipped with IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise is vulnerable to information disclosure. Multiple vulnerabilities have been identified in IBM Db2 and information about their fixes are published as security bulletins. Vulnerability Details Refer to the...

Security Bulletin: Vulnerability in WebSphere Application Server affect IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise (CVE-2021-20353)

Summary WebSphere Application Server is shipped with IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise. A vulnerability has been identified in WebSphere Application Server and the information about their fixes is published in security bulletin. Vulnerability Details Refer to the securi...

Security Bulletin: A vulnerability in IBM® SDK, Java™ Technology Edition may affect IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise

Summary A vulnerability in IBM® SDK Java™ Technology Edition, Version 8.0.5.40 used by IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise. The CVE-2020-2773 was disclosed as part of the Oracle January 2020 Critical Patch Update. Vulnerability Details CVEID: CVE-2020-2773 DESCRIPTION: An...

Security update for ceph (moderate)

openSUSE Security Update: Security update for ceph Announcement ID: openSUSE-SU-2021:0544-1 Rating: moderate References: 1172926 1176390 1176489 1176679 1176828 1177360 1177857 1178837 1178860 1178905 1178932 1179569 1179997 1182766 Cross-References: CVE-2020-25678 CVE-2020-27839 CVSS scores:...

The vulnerability of the ePolicy Orchestrator extension of the McAfee Data Loss Prevention software allows a hacker to upload malicious files.

The vulnerability of the ePolicy Orchestrator extension of the McAfee Data Loss Prevention software lies in the ability to upload malicious files without limitation. Exploiting this vulnerability could allow a remote attacker to upload malware files...

McAfee ePolicy Orchestrator Multiple Vulnerabilities (SB10352)

The instance of McAfee ePolicy Orchestrator installed on the remote host is potentially affected by the following vulnerabilities: - An unvalidated client-side URL redirect vulnerability exists in McAfee ePolicy Orchestrator ePO. An unauthenticated, remote attacker could exploit this to cause an...

McAfee ePolicy Orchestrator Cross-Site Scripting Vulnerability

McAfee ePolicy Orchistrator ePO is a suite of scalable security management software from McAfee. The software enables centralized, streamlined management of endpoint, network, content security and compliance solutions. A cross-site scripting vulnerability exists in McAfee ePolicy Orchestrator ePO...

McAfee ePolicy Orchestrator Information Disclosure Vulnerability (CNVD-2021-24351)

McAfee ePolicy Orchistrator ePO is a suite of scalable security management software from McAfee. The software enables centralized, streamlined management of endpoint, network, content security and compliance solutions. An information disclosure vulnerability exists in McAfee ePolicy Orchestrator...

McAfee ePolicy Orchestrator URL Redirection Vulnerability

McAfee ePolicy Orchestrator ePO is a suite of scalable security management software from McAfee. The software enables centralized, streamlined management of endpoint, network, content security and compliance solutions. A security vulnerability exists in versions of McAfee ePolicy Orchestrator ePO...