4

CVE-2015-0921

Exploit
XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 allows remote authenticated users to read arbitrary files via the conditionXML parameter to the taskLogTable to orionUpdateTableFilter.do.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mcafee ≫ Epolicy Orchestrator Version <= 4.6.8
Mcafee ≫ Epolicy Orchestrator Version5.0.0
Mcafee ≫ Epolicy Orchestrator Version5.0.1
Mcafee ≫ Epolicy Orchestrator Version5.1.0
Mcafee ≫ Epolicy Orchestrator Version5.1.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 58.22% 0.98
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
http://seclists.org/fulldisclosure/2015/Jan/37
Third Party Advisory
Mailing List
http://seclists.org/fulldisclosure/2015/Jan/8
Third Party Advisory
Mailing List