Mcafee Epolicy Orchestrator Vulnerabilidad

Versión

5.1.0	8
5.1.1	8
5.3.1	8
5.3.2	8
5.9.0	8

Contramedidas

Official Fix	40
Temporary Fix	0
Workaround	2
Unavailable	0
Not Defined	6

Explotabilidad

High	4
Functional	0
Proof-of-Concept	18
Unproven	0
Not Defined	26

Vector de acceso

Not Defined	0
Physical	0
Local	4
Adjacent	2
Network	42

Autenticación

Not Defined	0
High	6
Low	14
None	28

La interacción del usuario

Not Defined	0
Required	14
None	34

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	4
≤5	10
≤6	16
≤7	2
≤8	2
≤9	6
≤10	8

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	6
≤5	16
≤6	10
≤7	0
≤8	8
≤9	6
≤10	2

VulDB

≤1	0
≤2	0
≤3	2
≤4	4
≤5	10
≤6	12
≤7	4
≤8	2
≤9	6
≤10	8

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	0
≤7	4
≤8	0
≤9	0
≤10	2

CNA

≤1	0
≤2	0
≤3	0
≤4	2
≤5	6
≤6	4
≤7	4
≤8	0
≤9	0
≤10	0

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	0
<2k	2
<5k	2
<10k	28
<25k	6
<50k	10
<100k	0
≥100k	0

Explotar hoy

<1k	44
<2k	0
<5k	4
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

Affected Versions (45): 2.0, 2.1, 2.2, 2.5, 2.5.1, 3.0, 3.5, 4.0, 4.6, 4.6.1, 4.6.2, 4.6.3, 4.6.4, 4.6.5, 4.6.6, 4.6.6 Build 176, 4.6.7, 4.6.8, 4.6.9, 5.0, 5.1, 5.1.1, 5.1.2, 5.1.3, 5.2, 5.3, 5.3.1, 5.3.2, 5.3.3, 5.4, 5.5, 5.6, 5.7, 5.7.1, 5.7.2, 5.7.3, 5.7.4, 5.7.5, 5.8, 5.9, 5.9.1, 5.10 Update 9, 5.10 Update 10, 5.10 Update 12, 5.10.0 Update 3

Link to Product Website: https://www.mcafee.com/

Tipo de software: Endpoint Management Software

Fecha de publicación	Base	Temp	Vulnerabilidad	0day	Hoy	Exp	Con	CVE
2022-04-14	6.2	6.1	McAfee ePolicy Orchestrator sql injection	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2022-1258
2022-03-23	4.8	4.7	McAfee ePolicy Orchestrator Link cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2022-0857
2022-03-23	5.3	5.2	McAfee ePolicy Orchestrator divulgación de información	$0-$5k	$0-$5k	Not Defined	Official Fix	CVE-2022-0859
2022-03-23	4.3	4.2	McAfee ePolicy Orchestrator Link cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2022-0858
2022-03-23	4.0	4.0	McAfee ePolicy Orchestrator sql injection	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2022-0842
2022-03-23	4.1	4.0	McAfee ePolicy Orchestrator Extension Import XML External Entity	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2022-0861
2021-10-22	3.6	3.5	McAfee ePolicy Orchestrator cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	CVE-2021-31835
2021-10-22	3.9	3.8	McAfee ePolicy Orchestrator cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	CVE-2021-31834
2021-03-27	5.3	5.1	McAfee ePolicy Orchestrator Agent divulgación de información	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2021-23890
2021-03-27	3.6	3.4	McAfee ePolicy Orchestrator cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	CVE-2021-23889