Mcafee Epolicy Orchestrator (Epo) vulnerabilities

6 vulnerabilities

Known vulnerabilities in Mcafee Epolicy Orchestrator (Epo), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.2CVE-2018-6660mcafeeepolicy_orchestrator+1
EPSS score
1.65%
Directory Traversal vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data streams, which could be used to bypass the file extensions, via not properly validating the path when exporting a particular XML file.6.5CVE-2018-6672mcafeeepolicy_orchestrator+1
EPSS score
1.20%
Information disclosure vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows authenticated users to view sensitive information in plain text format via unspecified vectors.6.5CVE-2018-6671mcafeeepolicy_orchestrator+1
EPSS score
2.58%
Application Protection Bypass vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows remote authenticated users to bypass localhost only access security protection for some ePO features via a specially crafted HTTP request.5.4CVE-2018-6659mcafeeepolicy_orchestrator+1
EPSS score
1.02%
Reflected Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows remote authenticated users to exploit an XSS issue via not sanitizing the user input.9.8CVE-2017-3936mcafeeepolicy_orchestrator+1
EPSS score
1.38%
OS Command Injection vulnerability in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows attackers to run arbitrary OS commands with limited privileges via not sanitizing the user input data before exporting it into a CSV format output.7.2CVE-2017-3980mcafeeepolicy_orchestrator+1
EPSS score
2.82%
A directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, and 5.1.3 and earlier allows remote authenticated users to execute a command of their choice via an authenticated ePO session.