Mcafee Epolicy Orchestrator Vulnérabilités

Version

4.6.6 Build 176	8
5.3.0	6
5.3.1	6
5.3.2	6
5.9.0	6

Contre-mesures

Official Fix	40
Temporary Fix	0
Workaround	2
Unavailable	0
Not Defined	6

Exploitabilité

High	6
Functional	0
Proof-of-Concept	18
Unproven	4
Not Defined	20

Vecteur d'accès

Not Defined	0
Physical	0
Local	6
Adjacent	4
Network	38

Authentification

Not Defined	0
High	6
Low	20
None	22

Interaction de l'utilisateur

Not Defined	0
Required	12
None	36

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	4
≤5	8
≤6	18
≤7	4
≤8	6
≤9	4
≤10	4

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	6
≤5	20
≤6	8
≤7	4
≤8	6
≤9	2
≤10	2

VulDB

≤1	0
≤2	0
≤3	2
≤4	4
≤5	6
≤6	16
≤7	6
≤8	6
≤9	4
≤10	4

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	4
≤6	2
≤7	2
≤8	0
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	4
≤5	4
≤6	0
≤7	2
≤8	0
≤9	0
≤10	0

Fournisseur

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 jour

<1k	0
<2k	2
<5k	2
<10k	24
<25k	8
<50k	12
<100k	0
≥100k	0

Exploiter aujourd'hui

<1k	44
<2k	2
<5k	2
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (45): 2.0, 2.1, 2.2, 2.5, 2.5.1, 3.0, 3.5, 4.0, 4.6, 4.6.1, 4.6.2, 4.6.3, 4.6.4, 4.6.5, 4.6.6, 4.6.6 Build 176, 4.6.7, 4.6.8, 4.6.9, 5.0, 5.1, 5.1.1, 5.1.2, 5.1.3, 5.2, 5.3, 5.3.1, 5.3.2, 5.3.3, 5.4, 5.5, 5.6, 5.7, 5.7.1, 5.7.2, 5.7.3, 5.7.4, 5.7.5, 5.8, 5.9, 5.9.1, 5.10 Update 9, 5.10 Update 10, 5.10 Update 12, 5.10.0 Update 3

Link to Product Website: https://www.mcafee.com/

Type de logiciel: Endpoint Management Software

Publié	Base	Temp	Vulnérabilité	0day	Aujourd'hui	Exp	Con	CVE
14/04/2022	6.2	6.1	McAfee ePolicy Orchestrator sql injection	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2022-1258
23/03/2022	4.8	4.7	McAfee ePolicy Orchestrator Link cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2022-0857
23/03/2022	5.3	5.2	McAfee ePolicy Orchestrator divulgation de l'information	$0-$5k	$0-$5k	Not Defined	Official Fix	CVE-2022-0859
23/03/2022	4.3	4.2	McAfee ePolicy Orchestrator Link cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2022-0858
23/03/2022	4.0	4.0	McAfee ePolicy Orchestrator sql injection	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2022-0842
23/03/2022	4.1	4.0	McAfee ePolicy Orchestrator Extension Import XML External Entity	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2022-0861
22/10/2021	3.6	3.5	McAfee ePolicy Orchestrator cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	CVE-2021-31835
22/10/2021	3.9	3.8	McAfee ePolicy Orchestrator cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	CVE-2021-31834
27/03/2021	5.3	5.1	McAfee ePolicy Orchestrator Agent divulgation de l'information	$5k-$25k	Calculateur	Not Defined	Official Fix	CVE-2021-23890
27/03/2021	3.6	3.4	McAfee ePolicy Orchestrator cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	CVE-2021-23889