CVE-2015-1618

The ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated users to obtain sensitive password information via a crafted URL...

CVE-2015-1616

SQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated ePO users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated ePO users to execute arbitrary SQL commands via unspecified vectors...

Default credentials

The ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated users to obtain sensitive password information via a crafted URL...

CVE-2015-1616

SQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated ePO users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-1616

CVE-2015-1616 affects McAfee Data Loss Prevention Endpoint (DLPe) with the ePO extension prior to 9.3.400. The issue is a SQL injection vulnerability identified as being due to improper input sanitization, allowing remote authenticated ePO users to execute arbitrary SQL commands via unspecified v...

CVE-2015-1617

Cross-site scripting XSS vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3.400 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-1618

The CVE-2015-1618 issue affects the McAfee Data Loss Prevention Endpoint (DLPe) ePO extension prior to 9.3.400. A remote, authenticated user can obtain sensitive password information via a specially crafted URL, due to insufficient access checks in the ePO extension. Impact is information disclos...

Xxe

XML external entity XXE vulnerability in the Server Task Log in McAfee ePolicy Orchestrator ePO before 4.6.9 and 5.x before 5.1.2 allows remote authenticated users to read arbitrary files via the conditionXML parameter to the taskLogTable to orionUpdateTableFilter.do...

CVE-2015-0922

McAfee ePolicy Orchestrator ePO before 4.6.9 and 5.x before 5.1.2 uses the same secret key across different customers' installations, which allows attackers to obtain the administrator password by leveraging knowledge of the encrypted password...

CVE-2015-0921

McAfee ePolicy Orchestrator (ePO) is affected by an XML External Entity (XXE) vulnerability in the Server Task Log. Versions prior to 4.6.9 and 5.x prior to 5.1.2 allow remote authenticated users to read arbitrary files via the conditionXML parameter to the taskLogTable orionUpdateTableFilter.do....

CVE-2015-0922

CVE-2015-0922 affects McAfee ePolicy Orchestrator (ePO) versions before 4.6.9 and 5.x before 5.1.2. The issue is an information disclosure: the product uses the same secret key to encrypt password data across different customer installations, allowing an attacker with knowledge of the encrypted p...

Microsoft Windows SMB Registry : McAfee EPO GUID

By reading the registry key HKLM\SOFTWARE\Network Associates\ePolicy Orchestrator\Agent, it was possible to determine that the remote Windows system is managed by McAfee EPO. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid77477; scriptversion"1.7";...

McAfee ePO 4.6.6 - Multiple Vulnerabilities

No description provided by source. Classification: NON SENSITIVE INFORMATION RELEASABLE TO THE PUBLIC Multiple vulnerabilities in McAfee ePO 4.6.6 Affected Product: McAfee ePO 4.6.6 Build 176 & potentially earlier versions Timeline: 08 June 2013 - Vulnerability found 12 June 2013 - Vendor informe...

[RT-SA-2014-001] McAfee ePolicy Orchestrator: XML External Entity Expansion in Dashboard

Advisory: McAfee ePolicy Orchestrator XML External Entity Expansion in Dashboard RedTeam Pentesting identified an XML external entity expansion vulnerability in McAfee ePolicy Orchestrator's ePO dashboard feature. Users with the ability to create new dashboards in the ePO web interface who exploi...

CVE-2014-2205

The Import and Export Framework in McAfee ePolicy Orchestrator ePO before 4.6.7 Hotfix 940148 allows remote authenticated users with permissions to add dashboards to read arbitrary files by importing a crafted XML file, related to an XML External Entity XXE issue...

CVE-2014-2205

CVE-2014-2205 affects McAfee ePolicy Orchestrator (ePO) up to version 4.6.7 with Hotfix 940148. The issue is an XML External Entity (XXE) weakness in the ePO Web Console that, when a remote, authenticated user with permission to add dashboards imports a crafted XML dashboard definition, allows re...

McAfee Managed Agent 'FrameworkService.exe'远程拒绝服务漏洞

BUGTRAQ ID: 62785 CVECAN ID: CVE-2013-3627 McAfee Agent可通过ePO通讯进行反病毒软件的部署和管理工作。 McAfee Managed Agent 4.5.0.1927、4.6.0.3258之前版本的框架服务FrameworkService.exe存在拒绝服务漏洞，远程攻击者通过特制的畸形HTTP请求到默认TCP端口8081，利用此漏洞可造成拒绝服务。要利用此漏洞需要禁用 "Accept connections only from the ePO server" 选项。 0 McAfee Managed Agent = 4.6 Pat...

McAfee Managed Agent contains a denial-of-service (DoS) vulnerability

Overview McAfee Managed Agent versions 4.5, 4.6, and possibly earlier versions contain a denial-of-service DoS vulnerability CWE-400. Description CWE-400:Uncontrolled Resource Consumption 'Resource Exhaustion' McAfee Managed Agent versions 4.5 and 4.6 contain a denial-of-service DoS vulnerability...

CVE-2013-4882

CVE-2013-4882: McAfee ePolicy Orchestrator (ePO) includes multiple SQL injection vulnerabilities—affecting ePO 4.6.6 and earlier and the ePO extension for MCAfee Agent 4.5/4.6—allowing remote authenticated users to execute arbitrary SQL via the uid parameter in core/showRegisteredTypeDetails.do a...