A XML Extended entity vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote administrator attacker to upload a malicious XML file through the extension import functionality. The impact is limited to some access to confidential information and some ability to alter data.
2022-03-23T15:15:08.557
2024-11-21T06:39:32.967
Modified
CVSSv3.1: 3.5 (LOW)
AV:N/AC:L/Au:S/C:P/I:P/A:N
8.0
4.9
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | mcafee | epolicy_orchestrator | < 5.10.0 | Yes |
Application | mcafee | epolicy_orchestrator | 5.10.0 | Yes |
Application | mcafee | epolicy_orchestrator | 5.10.0 | Yes |
Application | mcafee | epolicy_orchestrator | 5.10.0 | Yes |
Application | mcafee | epolicy_orchestrator | 5.10.0 | Yes |
Application | mcafee | epolicy_orchestrator | 5.10.0 | Yes |
Application | mcafee | epolicy_orchestrator | 5.10.0 | Yes |
Application | mcafee | epolicy_orchestrator | 5.10.0 | Yes |
Application | mcafee | epolicy_orchestrator | 5.10.0 | Yes |
Application | mcafee | epolicy_orchestrator | 5.10.0 | Yes |
Application | mcafee | epolicy_orchestrator | 5.10.0 | Yes |
Application | mcafee | epolicy_orchestrator | 5.10.0 | Yes |
Application | mcafee | epolicy_orchestrator | 5.10.0 | Yes |
Application | mcafee | epolicy_orchestrator | 5.10.0 | Yes |