CVE-2019-5533

In VMware SD-WAN by VeloCloud versions 3.x prior to 3.3.0, the VeloCloud Orchestrator parameter authorization check mistakenly allows enterprise users to obtain information of Managed Service Provider accounts. Among the information is username, first and last name, phone numbers and e-mail addre...

CVE-2019-3619

Information Disclosure vulnerability in the Agent Handler in McAfee ePolicy Orchestrator ePO 5.9.x and 5.10.0 prior to 5.10.0 update 4 allows remote unauthenticated attacker to view sensitive information in plain text via sniffing the traffic between the Agent Handler and the SQL server...

CVE-2015-8765

Intel McAfee ePolicy Orchestrator ePO 4.6.9 and earlier, 5.0.x, 5.1.x before 5.1.3 Hotfix 1106041, and 5.3.x before 5.3.1 Hotfix 1106041 allow remote attackers to execute arbitrary code via a crafted serialized Java object, related to the Apache Commons Collections ACC library...

CVE-2025-40635

SQL injection vulnerability in Comerzzia Backoffice: Sales Orchestrator 3.0.15. This vulnerability allows an attacker to retrieve, create, update and delete databases via the ‘uidActivity’, ‘codCompany’ and ‘uidInstance’ parameters of the ‘/comerzzia/login’ endpoint...

PT-2025-22133 · Unknown · Comerzzia Backoffice: Sales Orchestrator

Name of the Vulnerable Software and Affected Versions: Comerzzia Backoffice: Sales Orchestrator version 3.0.15 Description: The issue allows an attacker to retrieve, create, update, and delete databases via the uidActivity, codCompany, and uidInstance parameters of the "/comerzzia/login" endpoint...

CVE-2025-21081

Protection mechanism failure for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20030

Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable information disclosure via adjacent access...

CVE-2025-20076

Improper access control for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2025-20013

Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-20084

Uncontrolled resource consumption for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2025-20624

Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable information disclosure via adjacent access...

CVE-2025-20057

Uncontrolled resource consumption for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2025-20022

Insufficient control flow management for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow a privileged user to potentially enable information disclosure via adjacent access...

CVE-2025-20611

Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-20612

Incorrect execution-assigned permissions for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2025-22844

Improper access control for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

CVE-2025-22848

Improper conditions check for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2025-22895

Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-22446

Inadequate encryption strength for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2025-22843

Incorrect execution-assigned permissions for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via local access...