2523 matches found
VMware product updates address security vulnerabilities in Apache Struts library
The Apache Struts library is updated to version 2.3.16.2 to address multiple security issues.The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2014-0050, CVE-2014-0094, and CVE-2014-0112 to these issues.CVE-2014-0112 may lead to remote code execution. This...
McAfee ePolicy Orchestrator Remote Code Execution (CVE-2013-0140; CVE-2013-0141)
A remote code execution vulnerability has been reported in McAfee ePolicy Orchestrator ePO. The vulnerability is due to an error in the ePO server that fails to properly sanitize user supplied data. A remote attacker can exploit this weakness to execute arbitrary code via a specially crafted http...
VMSA-2014-0007:VMware product updates address security vulnerabilities in Apache Struts library
VMSA-2014-0007.2 VMware product updates address security vulnerabilities in Apache Struts library VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2014-0007.2 VMware Security Advisory Synopsis: VMware product updates address security vulnerabilities in Apache Struts library...
McAfee ePolicy Orchestrator Multiple OpenSSL Vulnerabilities (SB10075)
The remote host is running a version of McAfee ePolicy Orchestrator that is affected by multiple vulnerabilities due to flaws in the OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other sessions or allow denial of service attacks. Not...
McAfee ePolicy Orchestrator OpenSSL Information Disclosure (SB10071) (Heartbleed)
The remote host is running a version of McAfee ePolicy Orchestrator that is affected by an information disclosure due to a flaw in the OpenSSL library, commonly known as the Heartbleed bug. An attacker could potentially exploit this vulnerability repeatedly to read up to 64KB of memory from the...
McAfee ePolicy Orchestrator 4.6.0-4.6.5 (ePowner) - Multiple Vulnerabilities
McAfee ePolicy Owner ePowner version 0.1 is an exploit that can add an administrative user to McAfee ePolicy Orchestrator as well as execute arbitrary commands on versions 4.6.0 through 4.6.5. Exploit Title: McAfee ePolicy Orchestrator 4.6.0-4.6.5 ePowner - Multiple vulnerabilities Date: 20...
McAfee ePolicy Orchestrator 4.6.0 4.6.5 - ePowner Multiple Vulnerabilities
McAfee ePolicy Orchestrator 4.6.0 4.6.5 - ePowner Multiple Vulnerabilities Exploit Title: McAfee ePolicy Orchestrator 4.6.0-4.6.5 ePowner - Multiple vulnerabilities Date: 20 November 2012 Exploit Author: [email protected] a.k.a. [email protected] Vendor Homepage:...
McAfee ePolicy Orchestrator 4.6.0 < 4.6.5 - 'ePowner' Multiple Vulnerabilities
Exploit Title: McAfee ePolicy Orchestrator 4.6.0-4.6.5 ePowner - Multiple vulnerabilities Date: 20 November 2012 Exploit Author: [email protected] a.k.a. [email protected] Vendor Homepage: http://www.mcafee.com/uk/products/epolicy-orchestrator.aspx Version: 4.6.0 - 4.6.5 Tested on: Windows...
McAfee ePolicy Orchestrator XML External Entity (CVE-2014-2205)
An XML External Entity XXE vulnerability has been reported in McAfee ePolicy Orchestrator ePO. The vulnerability is due to a design weakness in the ePO Web Console component. A remote attacker can exploit this vulnerability by sending a maliciously crafted XML dashboard definition...
McAfee ePolicy Orchestrator < 4.6.7 Hotfix 940148 XXE Vulnerability
McAfee ePolicy Orchestrator is prone to an XML external entity XXE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
McAfee ePolicy Orchestrator information leakage
Information leakage via XML include...
McAfee ePolicy Orchestrator < 4.6.7 HF940148 XML Entity Injection (SB10065)
The remote Windows host is running a version of McAfee ePolicy Orchestrator ePO prior to 4.6.7 hotfix 940148. It is, therefore, affected by an XML entity injection vulnerability due to a failure to properly sanitize user-supplied input. An authenticated, remote attacker with permission to add new...
McAfee ePolicy Orchestrator XML外部实体漏洞
Bugtraq ID:65771 McAfee ePolicy Orchestrator是一款业界领先的系统安全管理解决方案，能够帮助企业有效抵御各种恶意威胁和攻击。 McAfee ePolicy Orchestrator在解析XML实体时存在错误，允许攻击者通过特制的包含外部实体引用的XML文档，获取本地文件内容信息。 要成功利用漏洞需要有编辑dashboards, queries, reports或server任务的权限。 0 McAfee ePolicy Orchestrator 4.6.7 厂商补丁： McAfee ----- 用户可参考如下厂商提供的安全补丁以修复该漏洞：...
McAfee ePolicy Orchestrator Unsupported Version Detection
According to its version, the installation of McAfee ePolicy Orchestrator ePO on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenable...
CVE-2014-2205
The Import and Export Framework in McAfee ePolicy Orchestrator ePO before 4.6.7 Hotfix 940148 allows remote authenticated users with permissions to add dashboards to read arbitrary files by importing a crafted XML file, related to an XML External Entity XXE issue...
Xxe
The Import and Export Framework in McAfee ePolicy Orchestrator ePO before 4.6.7 Hotfix 940148 allows remote authenticated users with permissions to add dashboards to read arbitrary files by importing a crafted XML file, related to an XML External Entity XXE issue...
CVE-2014-2205
CVE-2014-2205 affects McAfee ePolicy Orchestrator (ePO) up to version 4.6.7 with Hotfix 940148. The issue is an XML External Entity (XXE) weakness in the ePO Web Console that, when a remote, authenticated user with permission to add dashboards imports a crafted XML dashboard definition, allows re...
KLA10261 RLF vulnerability in McAfee ePolicy Orchestrator
An unspecified vulnerability was found in McAfee ePolicy Orchestrator. By exploiting this vulnerability malicious users can read arbitrary files. This vulnerability can be exploited remotely via a specially designed XML file. Original advisories - Related products McAfee-ePolicy-Orchestrator CVE...
McAfee ePolicy Orchestrator XML External Entity Expansion
Advisory: McAfee ePolicy Orchestrator XML External Entity Expansion in Dashboard RedTeam Pentesting identified an XML external entity expansion vulnerability in McAfee ePolicy Orchestrator's ePO dashboard feature. Users with the ability to create new dashboards in the ePO web interface who exploi...