McAfee,LLC McAfee ePolicy Orchestrator (ePO) vulnerabilities

87 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Latest McAfee,LLC McAfee ePolicy Orchestrator (ePO) vulnerabilities

CVE-2024-4843 — (CVSS 4.3)
CVE-2023-5445 — (CVSS 5.4)
CVE-2023-5444 — CSRF in ePO leading to privilege escalation (CVSS 8.0)
CVE-2023-3946 — (CVSS 6.1)
CVE-2022-3339 — Reflected XSS in Trellix ePO server (CVSS 6.1)
CVE-2022-3338 — XXE in Trellix ePO server (CVSS 5.4)
CVE-2022-0862 — ePO password change vulnerability (CVSS 5.3)
CVE-2022-0861 — ePO XML extended entity vulnerability (CVSS 3.8)
CVE-2022-0859 — ePO database restoration vulnerability (CVSS 6.7)
CVE-2022-0858 — Cross-site scripting vulnerability in ePO (CVSS 4.7)
CVE-2022-0857 — ePO Reflected Cross-site scripting vulnerability (CVSS 6.1)
CVE-2022-0842 — ePO blind SQL Injection vulnerability (CVSS 4.9)
CVE-2021-31835 — McAfee ePO Cross-Site Scripting vulnerability (CVSS 4.8)
CVE-2021-31834 — McAfee ePO Cross-Site Scripting vulnerability (CVSS 5.4)
CVE-2021-3712 — Read buffer overruns processing ASN.1 strings (CVSS 7.4)
CVE-2021-2432 — (CVSS 4.3)
CVE-2021-33037 — Incorrect Transfer-Encoding handling with HTTP/1.0 (CVSS 5.3)
CVE-2021-30639 — DoS after non-blocking IO error (CVSS 7.5)
CVE-2020-13938 — Improper Handling of Insufficient Privileges (CVSS 5.5)
CVE-2021-2161 — (CVSS 4.3)
CVE-2021-23890 — McAfee ePO Information Leak vulnerability (CVSS 6.5)
CVE-2021-23889 — McAfee ePO Cross-site Scripting vulnerability (CVSS 4.8)
CVE-2021-23888 — McAfee ePO unvalidated URL redirect vulnerability (CVSS 6.3)
CVE-2021-23840 — Integer overflow in CipherUpdate (CVSS 7.5)
CVE-2020-14792 — (CVSS 5.8)