What’s Vulnerable › Vulnerabilities

CVE-2015-7310

• Severity: medium (CVSS 6.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-09-22 · updated 2026-06-17
• Weakness: CWE-78

Description

McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enterprise Security Manager/Receiver (ESMREC) before 9.3.2MR18, 9.4.x before 9.4.2MR8, and 9.5.x before 9.5.0MR7 allow remote authenticated users to execute arbitrary OS commands via a crafted filename, which is not properly handled when downloading the file.

Affected products

• McAfee, LLC McAfee Enterprise Security Manager (ESM): through 9.3.2; through 9.4.2; through 9.5.0
• McAfee Enterprise Security Manager/Log Manager: through 9.3.2; through 9.4.2; through 9.5.0
• McAfee Enterprise Security Manager/Receiver: through 9.3.2; through 9.4.2; through 9.5.0

References

• http://www.securitytracker.com/id/1033654
• https://kc.mcafee.com/corporate/index?page=content&id=SB10133
• http://www.securitytracker.com/id/1033654
• https://kc.mcafee.com/corporate/index?page=content&id=SB10133

Get alerted when CVE-2015-7310 or the next vulnerability affects your stack