4294 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePO Extension for the McAfee Agent MA 4.5 through 4.6, allow remote attackers to inject arbitrary web script or HTML via the 1 instanceId parameter core/loadDisplayType.do; 2 instanceId or ...
CVE-2013-4882
Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePolicy Orchestrator ePO extension for McAfee Agent MA 4.5 and 4.6, allow remote authenticated users to execute arbitrary SQL commands via the uid parameter to 1 core/showRegisteredTypeDetails.do and ...
CVE-2013-4883
Multiple cross-site scripting XSS vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePO Extension for the McAfee Agent MA 4.5 through 4.6, allow remote attackers to inject arbitrary web script or HTML via the 1 instanceId parameter core/loadDisplayType.do; 2 instanceId or ...
CVE-2013-4883
CVE-2013-4883 describes multiple cross-site scripting (XSS) vulnerabilities in McAfee ePolicy Orchestrator (ePO) version 4.6.6 and earlier, and in the ePO Extension for the McAfee Agent (MA) 4.5–4.6. The root cause is input handling flaws that allow an attacker to inject arbitrary web script or H...
CVE-2013-4882
CVE-2013-4882: McAfee ePolicy Orchestrator (ePO) includes multiple SQL injection vulnerabilities—affecting ePO 4.6.6 and earlier and the ePO extension for MCAfee Agent 4.5/4.6—allowing remote authenticated users to execute arbitrary SQL via the uid parameter in core/showRegisteredTypeDetails.do a...
McAfee ePolicy Orchestrator < 4.6.7 Multiple XSS
According to its self-reported version, the version of McAfee ePolicy Orchestrator ePO running on the remote host is 4.6.6 or earlier, and therefore, has multiple reflected cross-site scripting vulnerabilities. An attacker could exploit any of these issues by tricking a user into requesting a...
McAfee ePolicy Orchestrator security vulnerability
Few vulnerabilities are used in-the-wild to compromise corporate networks...
Re: Multiple vulnerabilities in McAfee ePO 4.6.6
McAfee has released a Knowledgebase Article KB to address the issues reported by a NATO pen test. https://kc.mcafee.com/corporate/index?page=content&id=KB78824 Both SQL Injection vulnerabilities were identified on May 10th, 2013 and patched as specified in SB10043. McAfee's internal testing leads...
TA13-193A: Exploit Tool Targets Vulnerabilities in McAfee ePolicy Orchestrator (ePO)
US Computer Emergency Readiness Team banner graphic National Cyber Awareness System: TA13-193A: Exploit Tool Targets Vulnerabilities in McAfee ePolicy Orchestrator ePO 07/12/2013 02:19 PM EDT Original release date: July 12, 2013 Systems Affected McAfee ePolicy Orchestrator ePO Overview A new...
Multiple vulnerabilities in McAfee ePO 4.6.6
Classification: NON SENSITIVE INFORMATION RELEASABLE TO THE PUBLIC Multiple vulnerabilities in McAfee ePO 4.6.6 Affected Product: McAfee ePO 4.6.6 Build 176 & potentially earlier versions Timeline: 08 June 2013 - Vulnerability found 12 June 2013 - Vendor informed 12 June 2013 - Vendor...
McAfee ePO 4.6.6 - Multiple Vulnerabilities
Exploit for windows platform in category web applications Vulnerability Details: 1. SQL injection a. GET /core/showRegisteredTypeDetails.do?registeredTypeID=epo.rt.computer&uid=6waitf or%20delay'0%3a0%3a20'-- &index=0&datasourceID=&orion.user.security.token=2LoWTAOfWJ4ZCjxY&ajax Mode=standard...
McAfee ePO 4.6.6 - Multiple Vulnerabilities
Classification: NON SENSITIVE INFORMATION RELEASABLE TO THE PUBLIC Multiple vulnerabilities in McAfee ePO 4.6.6 Affected Product: McAfee ePO 4.6.6 Build 176 & potentially earlier versions Timeline: 08 June 2013 - Vulnerability found 12 June 2013 - Vendor informed 12 June 2013 - Vendor...
McAfee ePO 4.6.6 - Multiple Vulnerabilities
McAfee ePO 4.6.6 - Multiple Vulnerabilities Classification: NON SENSITIVE INFORMATION RELEASABLE TO THE PUBLIC Multiple vulnerabilities in McAfee ePO 4.6.6 Affected Product: McAfee ePO 4.6.6 Build 176 & potentially earlier versions Timeline: 08 June 2013 - Vulnerability found 12 June 2013 - Vendo...
McAfee ePO 4.6.6 Cross Site Scripting / SQL Injection
Classification: NON SENSITIVE INFORMATION RELEASABLE TO THE PUBLIC Multiple vulnerabilities in McAfee ePO 4.6.6 Affected Product: McAfee ePO 4.6.6 Build 176 & potentially earlier versions Timeline: 08 June 2013 - Vulnerability found 12 June 2013 - Vendor informed 12 June 2013 - Vendor...
Operation Troy espionage campaign : Hackers steal South Korean military secrets
McAfee Lab researchers issued a report on the large scale cyber attacks against South Korea that appear to be linked to hackers also specialized in cyber espionage. The attackers behind these recent attacks against South Korean infrastructure are skilled professionals and they designed a...
McAfee ePolicy Orchestrator Installed (credentialed check)
McAfee ePolicy Orchestrator, a centralized security management application, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid67119; scriptversion"1.15"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...
McAfee ePO Extension for McAfee Agent Multiple Blind SQL Injection (SB10043)
According to its self-reported version number, the version of ePO Extension for McAfee Agent installed on the remote host has multiple blind SQL injection vulnerabilities. A remote, authenticated user could exploit this to execute arbitrary SQL queries, resulting in arbitrary code execution with...
McAfee Virtual Technician ActiveX Control Insecure Method Exposure (CVE-2012-5879)
An insecure method exposure vulnerability has been reported in McAfee Virtual Technician...
McAfee Data Loss Prevention - Multiple Information Disclosure Vulnerabilities
McAfee Data Loss Prevention - Multiple Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/61033/info McAfee Data Loss Prevention is prone to multiple information-disclosure vulnerabilities. Attackers can exploit these issues to disclose contents of arbitrary files an...
McAfee Data Loss Prevention - Multiple Information Disclosure Vulnerabilities
source: https://www.securityfocus.com/bid/61033/info McAfee Data Loss Prevention is prone to multiple information-disclosure vulnerabilities. Attackers can exploit these issues to disclose contents of arbitrary files and obtain sensitive information. This may aid in launching further attacks...