McAfee ePolicy Orchestrator OS Command Injection Vulnerability

McAfee ePolicy Orchestrator ePO is a suite of scalable security management software from McAfee. The software enables centralized, streamlined management of endpoint, network, content security and compliance solutions. An operating system injection vulnerability exists in McAfee ePolicy...

CVE-2018-6659

Reflected Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator ePO 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows remote authenticated users to exploit an XSS issue via not sanitizing the user input...

CVE-2018-6659

Reflected Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator ePO 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows remote authenticated users to exploit an XSS issue via not sanitizing the user input...

CVE-2018-6659 SB10228 ePO Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator ePO 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows remote authenticated users to exploit an XSS issue via not sanitizing the user input...

CVE-2018-6660

Directory Traversal vulnerability in McAfee ePolicy Orchestrator ePO 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data streams, which could be used to bypass the file extensions, via not properly validating the path when exporting a particular XML file...

CVE-2018-6660

Directory Traversal vulnerability in McAfee ePolicy Orchestrator ePO 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data streams, which could be used to bypass the file extensions, via not properly validating the path when exporting a particular XML file...

Directory traversal

Directory Traversal vulnerability in McAfee ePolicy Orchestrator ePO 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data streams, which could be used to bypass the file extensions, via not properly validating the path when exporting a particular XML file...

CVE-2018-6660

CVE-2018-6660 is a directory-traversal vulnerability in McAfee ePolicy Orchestrator (ePO) versions 5.3.0, 5.3.1, 5.3.2 and 5.9.0. The root cause is improper validation of paths when exporting a particular XML file, enabling use of Windows alternate data streams to bypass file extensions. The vuln...

CVE-2018-6660 SB10228 ePO Directory Traversal vulnerability

Directory Traversal vulnerability in McAfee ePolicy Orchestrator ePO 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data streams, which could be used to bypass the file extensions, via not properly validating the path when exporting a particular XML file...

McAfee ePolicy Orchestrator Directory Traversal and Cross-Site Scripting Vulnerability

McAfee ePolicy Orchestrator ePO is an industry-leading systems security management solution that helps organizations effectively defend against a wide range of malicious threats and attacks. Directory traversal and cross-site scripting vulnerabilities exist in McAfee ePolicy Orchestrator versions...

McAfee ePolicy Orchestrator Directory Traversal and Cross-Site Scripting Vulnerability (CNVD-2018-07436)

McAfee ePolicy Orchestrator ePO is an industry-leading systems security management solution that helps organizations effectively defend against a wide range of malicious threats and attacks. McAfee ePolicy Orchestrator versions 5.9,5.3.2,5.3.1,5.3.0 have directory traversal and cross-site scripti...

McAfee ePolicy Orchestrator DataChannel Blind SQL Injection Vulnerability(CVE-2016-8027)

Summary An exploitable blind sql injection vulnerability exists within McAfee's ePolicy Orchestrator 5.3.0 that is accessible without authentication. A specially crafted HTTP post can allow an aggressor to alter a sql query which can result in disclosure of information within the database or...

McAfee ePolicy Orchestrator 5.1.x < 5.1.3 HF1193124 / 5.3.x < 5.3.1 HF1194398 / 5.3.2 < 5.3.2 HF1193123 / 5.9.x < 5.9.0 HF1193951 Path Traversal RCE (SB10196)

The version of McAfee ePolicy Orchestrator ePO installed on the remote Windows host is 5.1.x prior to 5.1.3 hotfix 1193124, 5.3.x prior to 5.3.1 hotfix 1194398, 5.3.2 prior to 5.3.2 hotfix 1193123, or 5.9.x prior to 5.9.0 hotfix 1193951. It is affected by a remote command execution vulnerability...

Intel McAfee ePolicy Orchestrator Extension Directory Traversal Vulnerability

Intel McAfee ePolicy Orchestrator ePO is a suite of security management software from Intel Corporation formerly McAfee, Inc. that enables centralized and streamlined management of endpoint, network, and content security and compliance solutions. ePO Extension is one of the extensible security...

McAfee ePolicy Orchestrator Directory Traversal Vulnerability

McAfee ePolicy Orchestrator is prone to a directory traversal vulnerability which allows remote authenticated users to execute a command of their choice via an authenticated ePO session. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources,...

CVE-2017-3980

A directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator ePO 5.9.0, 5.3.2, and 5.1.3 and earlier allows remote authenticated users to execute a command of their choice via an authenticated ePO session...

CVE-2017-3980

A directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator ePO 5.9.0, 5.3.2, and 5.1.3 and earlier allows remote authenticated users to execute a command of their choice via an authenticated ePO session...

CVE-2017-3980

A directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator ePO 5.9.0, 5.3.2, and 5.1.3 and earlier allows remote authenticated users to execute a command of their choice via an authenticated ePO session...

McAfee ePolicy Orchestrator DataChannel GUID SQL Injection (CVE-2016-8027)

An SQL injection vulnerability exists in McAfee ePolicy Orchestrator. The vulnerability is due to insufficient input validation on the GUID parameter. A remote unauthenticated attacker could exploit this vulnerability by sending a specially crafted request to the affected server. Successful...

McAfee ePolicy Orchestrator SQL Injection Vulnerability

McAfee ePolicy Orchestrator is prone to a blind SQL injection vulnerability SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...