CVE-2015-0922

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/mcafeeepoxxe.rb 2025-02-06 03:13:42+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:35+00:00| seen|...

McAfee ePolicy Orchestrator 4.x < 4.6.9 / 5.x < 5.1.2 Multiple Vulnerabilities (SB10095)

The version of McAfee ePolicy Orchestrator ePO installed on the remote Windows host is 4.x prior to 4.6.9 or 5.x prior to 5.1.2. It is, therefore, affected by multiple vulnerabilities : - An XXE XML External Entity injection vulnerability exists in the Server Task Log due to an incorrectly...

CVE-2015-0922

CVE-2015-0922 affects McAfee ePolicy Orchestrator (ePO) versions before 4.6.9 and 5.x before 5.1.2. The issue is an information disclosure: the product uses the same secret key to encrypt password data across different customer installations, allowing an attacker with knowledge of the encrypted p...