CVE-2004-0095: mcafee epolicy_orchestrator

EPSS trend

Probability

37.20%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 37.20% on 20-09-2026

20-09-202620-10-2026

EPSS score

37.20%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databasedoswindowsVerified
McAfee ePolicy Orchestrator 1.x/2.x/3.0 Agent - POST Buffer Mismanagement
Maturity: poc

References

4 links

www.securityfocus.com/bid/9476VDB EntryX Refsource BIDExploitVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/14989VDB EntryX Refsource XF
www.osvdb.org/3744VDB EntryX Refsource OSVDB
download.nai.com/products/patches/ePO/v3.1.0/EPO3013.zipX Refsource CONFIRM

Related vulnerabilities

CVE-2018-6660mcafeeepolicy_orchestrator+11.65%8y ago02-04-2018 13:00Directory Traversal vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data streams, which could be used to bypass the file extensions, via not properly validating the path when exporting a particular XML file.CVE-2018-6659mcafeeepolicy_orchestrator+11.02%8y ago02-04-2018 17:00Reflected Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows remote authenticated users to exploit an XSS issue via not sanitizing the user input.CVE-2003-0616mcafeeepolicy_orchestrator3.04%23y ago01-08-2003 04:00Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request with format strings in the computerlist parameter, which are used when logging a failed name resolution.CVE-2003-0148mcafeeepolicy_orchestrator0.56%23y ago01-08-2003 04:00The default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers to execute arbitrary code via a series of steps that (1) obtain the database administrator username and encrypted password in a configuration file from the ePO server using a certain request, (2) crack the password due to weak cryptography, and (3) use the password to pass commands through xp_cmdshell.CVE-2003-0149mcafeeepolicy_orchestrator3.74%23y ago01-08-2003 04:00Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long parameters.CVE-2003-0610mcafeeepolicy_orchestrator2.37%23y ago01-08-2003 04:00Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a certain HTTP request.

All vulnerabilities inepolicy_orchestrator

CVE-2004-0095: mcafee epolicy_orchestrator

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References