CVE-2013-4883

CVE-2013-4883 describes multiple cross-site scripting (XSS) vulnerabilities in McAfee ePolicy Orchestrator (ePO) version 4.6.6 and earlier, and in the ePO Extension for the McAfee Agent (MA) 4.5–4.6. The root cause is input handling flaws that allow an attacker to inject arbitrary web script or H...

CVE-2013-4882

CVE-2013-4882: McAfee ePolicy Orchestrator (ePO) includes multiple SQL injection vulnerabilities—affecting ePO 4.6.6 and earlier and the ePO extension for MCAfee Agent 4.5/4.6—allowing remote authenticated users to execute arbitrary SQL via the uid parameter in core/showRegisteredTypeDetails.do a...

CVE-2006-3623

CVE-2006-3623 affects the McAfee ePolicy Orchestrator agent (Framework Service) prior to 3.5.0.x, where a directory traversal via a .. sequence in a PropsResponse (PackageType) request allows remote, unauthenticated attackers to create arbitrary files. The issue is a path traversal vulnerability ...