McAfee ePolicy Orchestrator 4.6.0 4.6.5 - ePowner Multiple Vulnerabilities

McAfee ePolicy Orchestrator 4.6.0 4.6.5 - ePowner Multiple Vulnerabilities Exploit Title: McAfee ePolicy Orchestrator 4.6.0-4.6.5 ePowner - Multiple vulnerabilities Date: 20 November 2012 Exploit Author: [email protected] a.k.a. [email protected] Vendor Homepage:...

McAfee ePolicy Orchestrator 4.6.0 < 4.6.5 - 'ePowner' Multiple Vulnerabilities

Exploit Title: McAfee ePolicy Orchestrator 4.6.0-4.6.5 ePowner - Multiple vulnerabilities Date: 20 November 2012 Exploit Author: [email protected] a.k.a. [email protected] Vendor Homepage: http://www.mcafee.com/uk/products/epolicy-orchestrator.aspx Version: 4.6.0 - 4.6.5 Tested on: Windows...

McAfee ePolicy Orchestrator XML External Entity (CVE-2014-2205)

An XML External Entity XXE vulnerability has been reported in McAfee ePolicy Orchestrator ePO. The vulnerability is due to a design weakness in the ePO Web Console component. A remote attacker can exploit this vulnerability by sending a maliciously crafted XML dashboard definition...

McAfee ePolicy Orchestrator < 4.6.7 Hotfix 940148 XXE Vulnerability

McAfee ePolicy Orchestrator is prone to an XML external entity XXE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

McAfee ePolicy Orchestrator information leakage

Information leakage via XML include...

McAfee ePolicy Orchestrator XML外部实体漏洞

Bugtraq ID:65771 McAfee ePolicy Orchestrator是一款业界领先的系统安全管理解决方案，能够帮助企业有效抵御各种恶意威胁和攻击。 McAfee ePolicy Orchestrator在解析XML实体时存在错误，允许攻击者通过特制的包含外部实体引用的XML文档，获取本地文件内容信息。 要成功利用漏洞需要有编辑dashboards, queries, reports或server任务的权限。 0 McAfee ePolicy Orchestrator 4.6.7 厂商补丁： McAfee ----- 用户可参考如下厂商提供的安全补丁以修复该漏洞：...

McAfee ePolicy Orchestrator < 4.6.7 HF940148 XML Entity Injection (SB10065)

The remote Windows host is running a version of McAfee ePolicy Orchestrator ePO prior to 4.6.7 hotfix 940148. It is, therefore, affected by an XML entity injection vulnerability due to a failure to properly sanitize user-supplied input. An authenticated, remote attacker with permission to add new...

McAfee ePolicy Orchestrator Unsupported Version Detection

According to its version, the installation of McAfee ePolicy Orchestrator ePO on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenable...

CVE-2014-2205

The Import and Export Framework in McAfee ePolicy Orchestrator ePO before 4.6.7 Hotfix 940148 allows remote authenticated users with permissions to add dashboards to read arbitrary files by importing a crafted XML file, related to an XML External Entity XXE issue...

Xxe

The Import and Export Framework in McAfee ePolicy Orchestrator ePO before 4.6.7 Hotfix 940148 allows remote authenticated users with permissions to add dashboards to read arbitrary files by importing a crafted XML file, related to an XML External Entity XXE issue...

CVE-2014-2205

CVE-2014-2205 affects McAfee ePolicy Orchestrator (ePO) up to version 4.6.7 with Hotfix 940148. The issue is an XML External Entity (XXE) weakness in the ePO Web Console that, when a remote, authenticated user with permission to add dashboards imports a crafted XML dashboard definition, allows re...

KLA10261 RLF vulnerability in McAfee ePolicy Orchestrator

An unspecified vulnerability was found in McAfee ePolicy Orchestrator. By exploiting this vulnerability malicious users can read arbitrary files. This vulnerability can be exploited remotely via a specially designed XML file. Original advisories - Exploitation Public exploits exist for this...

PT-2014-4555

Name of the Vulnerable Software and Affected Versions McAfee ePolicy Orchestrator ePO versions prior to 4.6.7 Hotfix 940148 Description The issue allows remote authenticated users with permissions to add dashboards to read arbitrary files by importing a crafted XML file, related to an XML Externa...

CVE-2014-2205: Undefined Security Weakness

The Import and Export Framework in McAfee ePolicy Orchestrator ePO before 4.6.7 Hotfix 940148 allows remote authenticated users with permissions to add dashboards to read arbitrary files by importing a crafted XML file, related to an XML External Entity XXE issue...

McAfee ePolicy Orchestrator XML External Entity Expansion

Advisory: McAfee ePolicy Orchestrator XML External Entity Expansion in Dashboard RedTeam Pentesting identified an XML external entity expansion vulnerability in McAfee ePolicy Orchestrator's ePO dashboard feature. Users with the ability to create new dashboards in the ePO web interface who exploi...

McAfee ePolicy Orchestrator Multiple Cross Site Scripting (CVE-2013-4883)

Multiple cross site scripting vulnerabilities have been reported in McAfee ePolicy Orchestrator...

McAfee ePolicy Orchestrator UID Multiple SQL Injection (CVE-2013-4882)

Multiple SQL injection vulnerabilities have been reported in McAfee ePolicy Orchestrator...

McAfee ePolicy Orchestrator (ePO) Multiple Vulnerabilities-01 (Aug 2013)

McAfee ePolicy Orchestrator is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

McAfee ePolicy Orchestrator (ePO) Multiple Vulnerabilities-02 (Aug 2013)

McAfee ePolicy Orchestrator is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

McAfee ePolicy Orchestrator (ePO) Security Bypass Vulnerability

McAfee ePolicy Orchestrator is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...