EO
Product
Epolicy Orchestrator
86
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 11Medium 34Low 18
Watch
Add Epolicy Orchestrator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-14581 | 3.7 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D) Affected: 5.9.0; 5.9.1; 5.10.0; 5.10.0; 5.10.0; 5.10.0; +5 more |
| CVE-2020-14579 | 3.7 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 5.9.0; 5.9.1; 5.10.0; 5.10.0; 5.10.0; 5.10.0; +5 more |
| CVE-2020-14578 | 3.7 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 5.9.0; 5.9.1; 5.10.0; 5.10.0; 5.10.0; 5.10.0; +5 more |
| CVE-2020-2773 | 3.7 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security) Affected: 5.9.0; 5.9.1; 5.10.0; 5.10.0; 5.10.0; 5.10.0; +5 more |
| CVE-2020-2757 | 3.7 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: 5.9.0 before 5.10.0; 5.10.0; 5.10.0; 5.10.0; 5.10.0; 5.10.0; +3 more |
| CVE-2020-2756 | 3.7 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: 5.9.0 before 5.10.0; 5.10.0; 5.10.0; 5.10.0; 5.10.0; 5.10.0; +3 more |
| CVE-2020-2755 | 3.7 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting) Affected: 5.9.0; 5.9.1; 5.10.0; 5.10.0; 5.10.0; 5.10.0; +5 more |
| CVE-2020-2754 | 3.7 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting) Affected: 5.9.0; 5.9.1; 5.10.0; 5.10.0; 5.10.0; 5.10.0; +5 more |
| CVE-2020-2654 | 3.7 | Jan 15 | Vulnerability in the Java SE product of Oracle Java SE (component: Libraries) Affected: 5.9.0; 5.9.1; 5.10.0; 5.10.0; 5.10.0; 5.10.0; +3 more |
| CVE-2020-2590 | 3.7 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security) Affected: 5.9.0; 5.9.1; 5.10.0; 5.10.0; 5.10.0; 5.10.0; +3 more |
| CVE-2020-2583 | 3.7 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: 5.9.0; 5.9.1; 5.10.0; 5.10.0; 5.10.0; 5.10.0; +3 more |
| CVE-2019-2894 | 3.7 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security) Affected: 5.9.0; 5.9.1; 5.10.0; 5.10.0; 5.10.0; 5.10.0; +3 more |
| CVE-2019-2842 | 3.7 | Jul 23 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JCE) Affected: 5.9.0; 5.9.1; 5.10.0; 5.10.0; 5.10.0; 5.10.0; +1 more |
| CVE-2019-2933 | 3.1 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 5.9.0; 5.9.1; 5.10.0; 5.10.0; 5.10.0; 5.10.0; +3 more |
| CVE-2019-2766 | 3.1 | Jul 23 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking) Affected: 5.9.0; 5.9.1; 5.10.0; 5.10.0; 5.10.0; 5.10.0; +1 more |
| CVE-2015-2859 | – | Jun 23 | Intel McAfee ePolicy Orchestrator (ePO) 4.x through 4.6.9 and 5.x through 5.1.2 does not validate server names and Certification Authority names in X.509 certificates from SSL… Affected: 4.0; 4.5.0; 4.5.3; 4.5.4; 4.5.5; 4.5.6; +16 more |
| CVE-2015-4559 | – | Jun 15 | Cross-site scripting (XSS) vulnerability in the product deployment feature in the Java core web services in Intel McAfee ePolicy Orchestrator (ePO) before 5.1.2 allows remote… Affected: through 5.1.1 |
| CVE-2015-0922 | – | Jan 9 | McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 uses the same secret key across different customers' installations, which allows attackers to obtain the… Affected: through 4.6.8; 5.0.0; 5.0.1; 5.1.0; 5.1.1 |
| CVE-2015-0921 | – | Jan 9 | XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 allows remote authenticated users to read… Affected: through 4.6.8; 5.0.0; 5.0.1; 5.1.0; 5.1.1 |
| CVE-2014-2205 | – | Feb 26 | The Import and Export Framework in McAfee ePolicy Orchestrator (ePO) before 4.6.7 Hotfix 940148 allows remote authenticated users with permissions to add dashboards to read… Affected: through 4.6.7; 4.6.0; 4.6.1; 4.6.2; 4.6.3; 4.6.4; +2 more |
| CVE-2013-4883 | – | Jul 22 | Multiple cross-site scripting (XSS) vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePO Extension for the McAfee Agent (MA) 4.5 through 4.6, allow remote… Affected: through 4.6.6; 4.6.0; 4.6.1; 4.6.2; 4.6.3; 4.6.4; +1 more |
| CVE-2013-4882 | – | Jul 22 | Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePolicy Orchestrator (ePO) extension for McAfee Agent (MA) 4.5 and 4.6, allow… Affected: through 4.6.6; 4.6.0; 4.6.1; 4.6.2; 4.6.3; 4.6.4; +1 more |
| CVE-2013-0141 | – | May 1 | Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request… Affected: through 4.5.6; 2.0; 2.5; 2.5; 2.5.1; 3.0; +15 more |
| CVE-2013-0140 | – | May 1 | SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary… Affected: through 4.5.6; 2.0; 2.5; 2.5; 2.5.1; 3.0; +15 more |
| CVE-2012-4594 | – | Aug 22 | McAfee ePolicy Orchestrator (ePO) 4.6.1 and earlier allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information from arbitrary… Affected: through 4.6.1; 2.0; 2.5; 2.5; 2.5.1; 3.0; +7 more |
| CVE-2008-1357 | – | Mar 17 | Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (Patch 3) and earlier, as used in ePolicy Orchestrator 4.0.0… Affected: 4.0 |
| CVE-2006-5274 | – | Jul 12 | Integer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 allows remote attackers to cause a… Affected: 3.5.0; 3.6.0 |
| CVE-2007-1498 | – | Mar 16 | Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control (SiteManager.dll) in the ePO management console in McAfee ePolicy Orchestrator (ePO) before… Affected: 3.5.0; 3.6.0; 3.6.1 |
| CVE-2006-5156 | – | Oct 5 | Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attackers to execute arbitrary code via a request to /spipe/pkg/… Affected: 3.0; 3.0; 3.5.0 |
| CVE-2004-0038 | – | Jun 14 | McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file… Affected: 2.5; 2.5; 2.5.1; 3.0; 3.0 |
| CVE-2004-0095 | – | Feb 17 | McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory consumption and crash) and possibly execute arbitrary code via an HTTP POST request… Affected: 3.6.0 |
| CVE-2003-0616 | – | Aug 27 | Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request with format… Affected: 2.0; 2.5; 2.5; 2.5.1 |
| CVE-2003-0610 | – | Aug 27 | Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a certain HTTP request Affected: 3.0 |
| CVE-2003-0149 | – | Aug 27 | Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long… Affected: 2.0; 2.5; 2.5; 2.5.1 |
| CVE-2003-0148 | – | Aug 27 | The default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers to execute arbitrary code via a series of steps that (1) obtain the database… Affected: 2.0; 2.5; 2.5; 2.5.1; 3.0 |
| CVE-2002-0690 | – | Apr 11 | Format string vulnerability in McAfee Security ePolicy Orchestrator (ePO) 2.5.1 allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing… Affected: 2.5.1 |