CVE-2015-0921: Undefined Security Weakness

XML external entity XXE vulnerability in the Server Task Log in McAfee ePolicy Orchestrator ePO before 4.6.9 and 5.x before 5.1.2 allows remote authenticated users to read arbitrary files via the conditionXML parameter to the taskLogTable to orionUpdateTableFilter.do...

PT-2015-4971

Name of the Vulnerable Software and Affected Versions McAfee ePolicy Orchestrator ePO versions prior to 4.6.9 McAfee ePolicy Orchestrator ePO versions 5.x prior to 5.1.2 Description The issue allows remote authenticated users to read arbitrary files. This is achieved via the conditionXML paramete...