EO
Product
Epolicy Orchestrator
86
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 11Medium 34Low 18
Watch
Add Epolicy Orchestrator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-3604 | 8.8 | Feb 1 | ePolicy Orchestrator Cloud update fixes multiple Cross-Site Request Forgery vulnerabilities Affected: All versions, or not specified |
| CVE-2015-8765 | 8.3 | Jan 8 | Intel McAfee ePolicy Orchestrator (ePO) 4.6.9 and earlier, 5.0.x, 5.1.x before 5.1.3 Hotfix 1106041, and 5.3.x before 5.3.1 Hotfix 1106041 allow remote attackers to execute… Affected: through 4.6.9; 5.0.0 through 5.0.1; 5.1.0 before 5.1.3; 5.3.0 before 5.3.1 |
| CVE-2020-2604 | 8.1 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: 5.9.0; 5.9.1; 5.10.0; 5.10.0; 5.10.0; 5.10.0; +3 more |
| CVE-2023-5444 | 8.0 | Nov 17 | A Cross Site Request Forgery vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2 allows a remote low privilege user to successfully add a new user with… Affected: before 5.10.0; 5.10.0; 5.10.0; 5.10.0; 5.10.0; 5.10.0; +14 more |
| CVE-2021-30639 | 7.5 | Jul 12 | A vulnerability in Apache Tomcat allows an attacker to remotely trigger a denial of service Affected: before 5.10.0; 5.10.0; 5.10.0; 5.10.0; 5.10.0; 5.10.0; +6 more |
| CVE-2021-23840 | 7.5 | Feb 16 | Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable… Affected: before 5.10.0; 5.10.0; 5.10.0; 5.10.0; 5.10.0; 5.10.0; +6 more |
| CVE-2020-13935 | 7.5 | Jul 14 | The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104 Affected: 5.9.0; 5.9.1; 5.10.0; 5.10.0; 5.10.0; 5.10.0; +5 more |
| CVE-2019-2602 | 7.5 | Apr 23 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 5.9.0; 5.9.1; 5.10.0 |
| CVE-2021-3712 | 7.4 | Aug 24 | ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length Affected: before 5.10.0; 5.10.0; 5.10.0; 5.10.0; 5.10.0; 5.10.0; +6 more |
| CVE-2017-3980 | 7.2 | May 18 | A directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, and 5.1.3 and earlier allows remote authenticated users to execute a… Affected: through 5.1.3; 5.3.0 through 5.3.3; 5.9.0 through 5.9.1 |
| CVE-2020-9484 | 7.0 | May 20 | When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a… Affected: 5.9.0; 5.9.1; 5.10.0; 5.10.0; 5.10.0; 5.10.0 |
Showing 11