2522 matches found
McAfee ePolicy Orchestrator (ePO) Multiple Vulnerabilities-02 (Aug 2013)
McAfee ePolicy Orchestrator is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
McAfee ePolicy Orchestrator (ePO) Security Bypass Vulnerability
McAfee ePolicy Orchestrator is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
McAfee ePolicy Orchestrator (ePO) Multiple Vulnerabilities-01 (Aug 2013)
McAfee ePolicy Orchestrator is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
McAfee ePolicy Orchestrator (ePO) Detection
Detects the installed version of McAfee ePolicy Orchestrator. The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...
CVE-2013-4883
Multiple cross-site scripting XSS vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePO Extension for the McAfee Agent MA 4.5 through 4.6, allow remote attackers to inject arbitrary web script or HTML via the 1 instanceId parameter core/loadDisplayType.do; 2 instanceId or ...
CVE-2013-4882
Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePolicy Orchestrator ePO extension for McAfee Agent MA 4.5 and 4.6, allow remote authenticated users to execute arbitrary SQL commands via the uid parameter to 1 core/showRegisteredTypeDetails.do and ...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePO Extension for the McAfee Agent MA 4.5 through 4.6, allow remote attackers to inject arbitrary web script or HTML via the 1 instanceId parameter core/loadDisplayType.do; 2 instanceId or ...
Sql injection
Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePolicy Orchestrator ePO extension for McAfee Agent MA 4.5 and 4.6, allow remote authenticated users to execute arbitrary SQL commands via the uid parameter to 1 core/showRegisteredTypeDetails.do and ...
CVE-2013-4883
Multiple cross-site scripting XSS vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePO Extension for the McAfee Agent MA 4.5 through 4.6, allow remote attackers to inject arbitrary web script or HTML via the 1 instanceId parameter core/loadDisplayType.do; 2 instanceId or ...
CVE-2013-4882
Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePolicy Orchestrator ePO extension for McAfee Agent MA 4.5 and 4.6, allow remote authenticated users to execute arbitrary SQL commands via the uid parameter to 1 core/showRegisteredTypeDetails.do and ...
CVE-2013-4883
CVE-2013-4883 describes multiple cross-site scripting (XSS) vulnerabilities in McAfee ePolicy Orchestrator (ePO) version 4.6.6 and earlier, and in the ePO Extension for the McAfee Agent (MA) 4.5–4.6. The root cause is input handling flaws that allow an attacker to inject arbitrary web script or H...
McAfee ePolicy Orchestrator < 4.6.7 Multiple XSS
According to its self-reported version, the version of McAfee ePolicy Orchestrator ePO running on the remote host is 4.6.6 or earlier, and therefore, has multiple reflected cross-site scripting vulnerabilities. An attacker could exploit any of these issues by tricking a user into requesting a...
McAfee ePolicy Orchestrator security vulnerability
Few vulnerabilities are used in-the-wild to compromise corporate networks...
TA13-193A: Exploit Tool Targets Vulnerabilities in McAfee ePolicy Orchestrator (ePO)
US Computer Emergency Readiness Team banner graphic National Cyber Awareness System: TA13-193A: Exploit Tool Targets Vulnerabilities in McAfee ePolicy Orchestrator ePO 07/12/2013 02:19 PM EDT Original release date: July 12, 2013 Systems Affected McAfee ePolicy Orchestrator ePO Overview A new...
McAfee ePolicy Orchestrator Installed (credentialed check)
McAfee ePolicy Orchestrator, a centralized security management application, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid67119; scriptversion"1.15"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...
Trellix ePolicy Orchestrator Application Server Detection
ePolicy Orchestrator ePO Application Server, a web interface for ePO, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66318; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/14";...
McAfee ePolicy Orchestrator 4.6.x Multiple Vulnerabilities (SB10042)
According to its self-reported version, the version of McAfee ePolicy Orchestrator running on the remote host has the following vulnerabilities : - An unspecified SQL injection vulnerability exists in the Agent-Handler component. A remote, unauthenticated attacker could exploit this to execute...
CVE-2013-0141
Directory traversal vulnerability in McAfee ePolicy Orchestrator ePO before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory...
CVE-2013-0140
SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator ePO before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel...
CVE-2013-0140
SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator ePO before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel...