Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: McAfee,LLC McAfee ePolicy Orchestrator (ePO) 5.10 CU 10 Clear all filters
TI-2021-06244 CVE-2021-23890 · GHSA-6gh5-794v-v6mc

McAfee ePO Information Leak vulnerability

Priority LOW 31

Information leak vulnerability in the Agent Handler of McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 allows an unauthenticated user to download McAfee product packages (specifically McAfee Agent) available in…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00906 Published 2021-03-26 Fixed in 5.10 CU 10 CWE-200
TI-2021-06242 CVE-2021-23888 · GHSA-6h63-w9wm-rccq

McAfee ePO unvalidated URL redirect vulnerability

Priority LOW 29

Unvalidated client-side URL redirect vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 could cause an authenticated ePO user to load an untrusted site in an ePO iframe which could steal informati…

CVSS 3.1MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00622 Published 2021-03-26 Fixed in 5.10 CU 10 CWE-601
TI-2021-06243 CVE-2021-23889 · GHSA-2v7g-2cpw-m7rv

McAfee ePO Cross-site Scripting vulnerability

Priority LOW 23

Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 allows ePO administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries w…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00506 Published 2021-03-26 Fixed in 5.10 CU 10 CWE-79