CVE-2015-2758

The CVE-2015-2758 entry affects the McAfee Data Loss Prevention Endpoint (DLPe) ePO extension prior to 9.3 Patch 4 Hotfix 16 (9.3.416.4). The vulnerability allows remote authenticated users to obtain sensitive information, modify the database, or cause other unspecified impact via a crafted URL. ...

CVE-2015-2759

CVE-2015-2759 is tied to multiple CSRF vulnerabilities in the McAfee DLPe ePO extension, affecting DLPe versions prior to 9.3 Patch 4 Hotfix 16 (9.3.416.4). The issue allows remote attackers to hijack user authentication to perform (1) information disclosure or (2) database modification via unspe...

CVE-2015-2760

CVE-2015-2760 is an XSS vulnerability in the McAfee DLPe ePO extension prior to 9.3 Patch 4 Hotfix 16 (9.3.416.4). The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in the ePO extension of DLPe. Affected product/version: McAfee Data Loss Pr...

CVE-2015-1618

The ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated users to obtain sensitive password information via a crafted URL...

CVE-2015-1618

The CVE-2015-1618 issue affects the McAfee Data Loss Prevention Endpoint (DLPe) ePO extension prior to 9.3.400. A remote, authenticated user can obtain sensitive password information via a specially crafted URL, due to insufficient access checks in the ePO extension. Impact is information disclos...

McAfee ePO Extension for McAfee Agent Multiple Blind SQL Injection (SB10043)

According to its self-reported version number, the version of ePO Extension for McAfee Agent installed on the remote host has multiple blind SQL injection vulnerabilities. A remote, authenticated user could exploit this to execute arbitrary SQL queries, resulting in arbitrary code execution with...