Mcafee Epolicy Orchestrator Epo (Mcafeellc) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-03-23. Vendor: Mcafeellc.
CVEs of Mcafee Epolicy Orchestrator Epo
- CVE-2022-0857 - CVSS 6.1 (medium), 2022-03-23: A reflected cross-site scripting (XSS) vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote attacker to…
- CVE-2022-0861 - CVSS 3.8 (low), 2022-03-23: A XML Extended entity vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote administrator attacker to upload a…
- CVE-2022-0859 - CVSS 6.7 (medium), 2022-03-23: McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a local attacker to point an ePO server to an arbitrary SQL server during the…
- CVE-2022-0858 - CVSS 4.7 (medium), 2022-03-23: A cross-site scripting (XSS) vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote attacker to potentially…
- CVE-2022-0862 - CVSS 5.3 (medium), 2022-03-23: A lack of password change protection vulnerability in a depreciated API of McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a…
- CVE-2022-0842 - CVSS 5.4 (medium), 2022-03-23: A blind SQL injection vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote authenticated attacker to…
- CVE-2021-31834 - CVSS 5.4 (medium), 2021-10-22: Stored Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 11 allows ePO administrators to inject arbitrary web…
- CVE-2021-31835 - CVSS 4.8 (medium), 2021-10-22: Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 11 allows ePO administrators to inject arbitrary web script or…
- CVE-2021-23890 - CVSS 6.5 (medium), 2021-03-26: Information leak vulnerability in the Agent Handler of McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 allows an unauthenticated user to download…
- CVE-2021-23889 - CVSS 4.8 (medium), 2021-03-26: Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 allows ePO administrators to inject arbitrary web script or…
- CVE-2021-23888 - CVSS 6.3 (medium), 2021-03-26: Unvalidated client-side URL redirect vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 could cause an authenticated ePO user to load…
