CVE-2022-0858

McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 contains a cross‑site scripting (XSS) vulnerability that could allow a remote attacker to obtain an administrator’s session by persuading the user to click a crafted link, with limited ability to alter information in the affecte...

CVE-2022-0859

CVE-2022-0859 affects McAfee Enterprise ePolicy Orchestrator (ePO) versions prior to 5.10 Update 13. The vulnerability allows a local attacker who is on the server hosting ePO (administrators) and who knows the SQL password to point the ePO server to an arbitrary SQL server during the restoration...

CVE-2022-0862

CVE-2022-0862 describes a password-change protection weakness in McAfee Enterprise ePolicy Orchestrator (ePO) before 5.10 Update 13, via a depreciated API. A remote attacker could change the password of a compromised session without knowing the current password. The UI removed this functionality ...

CVE-2022-0861

The CVE-2022-0861 entry describes a XML External Entity vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) versions prior to 5.10 Update 13. A remote administrator can upload a crafted XML file via the extension import functionality, with impact limited to some leakage of confidential ...

CVE-2022-0857

CVE-2022-0857 describes a reflected cross-site scripting (XSS) flaw in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13. The vulnerability could let a remote attacker lure an administrator to click a crafted link, potentially exposing session information and allowing limited i...

CVE-2022-0842

CVE-2022-0842 affects McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13. The vulnerability is a blind SQL injection in ePO, which could let a remote authenticated attacker obtain information from the ePO database. The amount of data potentially exposed depends on the attacker’s...

CVE-2020-13938

CVE-2020-13938 affects Apache HTTP Server 2.4.0–2.4.46. The vulnerability allows unprivileged local users to stop the httpd service on Windows. The connected sources confirm the affected product family and the local-access impact, with public advisories referencing Microsoft Windows behavior and ...

CVE-2021-23840

CVE-2021-23840 describes an integer-length overflow in EVP_CipherUpdate, EVP_EncryptUpdate, and EVP_DecryptUpdate that can cause a negative output length value when input length is near the platform’s integer limit. This can lead to application crashes or incorrect behavior. Affected OpenSSL rele...

CVE-2021-3712

The CVE-2021-3712 issue affects OpenSSL where ASN1_STRING data may not be NUL-terminated if constructed directly (or via ASN1_STRING_set0), causing read-buffer overreads when many OpenSSL print/name-constraining paths handle such ASN.1 strings. Exploitation could crash the application (DoS) or di...

CVE-2021-33037

CVE-2021-33037 affects Apache Tomcat: versions 10.0.0-M1–10.0.6, 9.0.0.M1–9.0.46, and 8.5.0–8.5.66 may mishandle the HTTP transfer-encoding header with reverse proxies, enabling request smuggling. Root cause: improper header handling allowing spoofed content encoding sequencing. Impact stated in ...

CVE-2021-2161

CVE-2021-2161 affects Oracle Java SE family (Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition) in the Libraries component. The issue arises from how untrusted code is loaded/run and data from untrusted APIs, enabling a network-accessible attacker to perform unauthenticated actions and...

CVE-2021-2432

CVE-2021-2432 affects Oracle Java SE (component: JNDI) with Java SE 7u301. The vulnerability can be exploited by an unauthenticated attacker who has network access over multiple protocols to cause a partial denial of service to Java SE. The issue specifically involves Java deployments that load u...

CVE-2021-30639

Apache Tomcat CVE-2021-30639 describes a DoS vulnerability caused by improper error handling during non-blocking I/O, where the error flag on a Request object isn’t reset between requests. This can allow a remote attacker to trigger non-blocking I/O errors (e.g., by dropping connections) and caus...

CVE-2023-5444

CVE-2023-5444 involves Trellix ePolicy Orchestrator before 5.10.0 CP1 Update 2. a CSRF allows a remote low-privilege attacker to add a new administrator user, impacting the dashboard UI. The exploit reportedly requires altering the HTTP payload post submission before it reaches the ePO server. Af...

CVE-2022-3338

CVE-2022-3338 is a Trellix ePolicy Orchestrator XXE vulnerability affecting ePO versions prior to 5.10 Update 14. An unauthenticated attacker could trigger a server-side request forgery by passing a crafted XML via the API, potentially exploiting the Agent Handler path. Supported details from con...

CVE-2023-5445

The CVE-2023-5445 open redirect affects Trellix ePolicy Orchestrator (ePO) before 5.10.0 CP1 Update 2. A low-privileged, authenticated user can modify a URL parameter to redirect requests to a malicious site, targeting the dashboard area. The vulnerability requires the attacker to alter the HTTP ...

CVE-2021-23890

CVE-2021-23890 (McAfee ePolicy Orchestrator) : An information-disclosure flaw in the ePO Agent Handler allows an unauthenticated attacker in a DMZ-enabled setup to download McAfee Agent packages from the ePO repository and obtain policy details from the ePO server. Affected: McAfee ePO prior to 5...

CVE-2021-31834

CVE-2021-31834 affects McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 11. Affected component: ePO web interfaces where user-supplied parameters were not properly sanitized, enabling Stored Cross-Site Scripting (XSS). Impact as documented: potential injection of arbitrary web script/HTML b...

CVE-2022-3339

Trellix ePolicy Orchestrator (ePO) prior to 5.10 Update 14 is affected by a reflected XSS (CVE-2022-3339). The vulnerability concerns the ePO web interface and can allow a remote, unauthenticated attacker to induce an authenticated administrator to click a crafted link, potentially enabling acces...

CVE-2021-23888

CVE-2021-23888 affects McAfee ePolicy Orchestrator (ePO) and is an unvalidated client-side URL redirect vulnerability in ePO prior to 5.10 Update 10. An authenticated ePO user could load an untrusted site inside an ePO iframe, potentially enabling information theft. Connected sources confirm the ...

CVE-2021-23889

CVE-2021-23889 affects McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10. The vulnerability is a Cross-Site Scripting (XSS) issue where administrator entries are not properly sanitized, allowing injected web script or HTML via multiple parameters. Exploitation would involve a malicious in...

CVE-2021-31835

CVE-2021-31835 (McAfee ePolicy Orchestrator, ePO) is a cross-site scripting vulnerability affecting ePO versions prior to 5.10 Update 11. The issue allows administrators to inject arbitrary web script or HTML via a specific parameter because entries were not properly sanitized. Connected sources ...

CVE-2012-4594

CVE-2012-4594 affects McAfee ePolicy Orchestrator (ePO) version 4.6.1 and earlier. The issue allows remote authenticated users to bypass access restrictions and read sensitive information from arbitrary reporting panels by modifying an ID value in a console URL. The provided documents do not spec...

CVE-2019-3604

CVE-2019-3604 is a Cross-Site Request Forgery vulnerability in McAfee ePO (legacy) Cloud. The connected documents describe that unauthenticated users could perform unintended ePO actions by leveraging an authenticated user’s session, via unspecified vectors. The exact vulnerable component/version...

CVE-2023-3946

Trellix ePolicy Orchestrator (ePO) prior to 5.10 SP1 Update 1 contains a reflected cross-site scripting (XSS) vulnerability. An unauthenticated attacker could entice an authenticated ePO administrator to click a crafted link, potentially exposing the administrator’s session and enabling limited a...