CVE-2014-2205

CVE-2014-2205 affects McAfee ePolicy Orchestrator (ePO) up to version 4.6.7 with Hotfix 940148. The issue is an XML External Entity (XXE) weakness in the ePO Web Console that, when a remote, authenticated user with permission to add dashboards imports a crafted XML dashboard definition, allows re...