CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-3604

Cross-Site Request Forgery (CSRF) vulnerability in McAfee ePO (legacy) Cloud allows unauthenticated users to perform unintended ePO actions using an authenticated user's session via unspecified vectors.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 39.2%

CVSS Severity

CVSS v3 Score 4.8

CVSS v2 Score 6.8

References

Products affected by CVE-2019-3604

Mcafee » Epolicy Orchestrator » Version: N/A

cpe:2.3:a:mcafee:epolicy_orchestrator:-
Mcafee » Epolicy Orchestrator » Version: 2.0

cpe:2.3:a:mcafee:epolicy_orchestrator:2.0
Mcafee » Epolicy Orchestrator » Version: 2.5

cpe:2.3:a:mcafee:epolicy_orchestrator:2.5
Mcafee » Epolicy Orchestrator » Version: 2.5.1

cpe:2.3:a:mcafee:epolicy_orchestrator:2.5.1
Mcafee » Epolicy Orchestrator » Version: 3.0

cpe:2.3:a:mcafee:epolicy_orchestrator:3.0
Mcafee » Epolicy Orchestrator » Version: 3.5.0

cpe:2.3:a:mcafee:epolicy_orchestrator:3.5.0
Mcafee » Epolicy Orchestrator » Version: 3.6.0

cpe:2.3:a:mcafee:epolicy_orchestrator:3.6.0
Mcafee » Epolicy Orchestrator » Version: 3.6.1

cpe:2.3:a:mcafee:epolicy_orchestrator:3.6.1
Mcafee » Epolicy Orchestrator » Version: 4.0

cpe:2.3:a:mcafee:epolicy_orchestrator:4.0
Mcafee » Epolicy Orchestrator » Version: 4.5.0

cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.0
Mcafee » Epolicy Orchestrator » Version: 4.5.3

cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.3
Mcafee » Epolicy Orchestrator » Version: 4.5.4

cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.4
Mcafee » Epolicy Orchestrator » Version: 4.5.5

cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.5
Mcafee » Epolicy Orchestrator » Version: 4.5.6

cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.6
Mcafee » Epolicy Orchestrator » Version: 4.5.7

cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.7
Mcafee » Epolicy Orchestrator » Version: 4.6.0

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.0
Mcafee » Epolicy Orchestrator » Version: 4.6.1

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.1
Mcafee » Epolicy Orchestrator » Version: 4.6.2

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.2
Mcafee » Epolicy Orchestrator » Version: 4.6.3

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.3
Mcafee » Epolicy Orchestrator » Version: 4.6.4

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.4
Mcafee » Epolicy Orchestrator » Version: 4.6.5

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.5
Mcafee » Epolicy Orchestrator » Version: 4.6.6

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.6
Mcafee » Epolicy Orchestrator » Version: 4.6.7

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.7
Mcafee » Epolicy Orchestrator » Version: 4.6.8

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.8
Mcafee » Epolicy Orchestrator » Version: 4.6.9

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.9
Mcafee » Epolicy Orchestrator » Version: 5.0.0

cpe:2.3:a:mcafee:epolicy_orchestrator:5.0.0
Mcafee » Epolicy Orchestrator » Version: 5.0.1

cpe:2.3:a:mcafee:epolicy_orchestrator:5.0.1
Mcafee » Epolicy Orchestrator » Version: 5.1.0

cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.0
Mcafee » Epolicy Orchestrator » Version: 5.1.1

cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.1
Mcafee » Epolicy Orchestrator » Version: 5.1.2

cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.2
Mcafee » Epolicy Orchestrator » Version: 5.1.3

cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.3
Mcafee » Epolicy Orchestrator » Version: 5.10.0

cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0
Mcafee » Epolicy Orchestrator » Version: 5.10.9

cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.9
Mcafee » Epolicy Orchestrator » Version: 5.3.0

cpe:2.3:a:mcafee:epolicy_orchestrator:5.3.0
Mcafee » Epolicy Orchestrator » Version: 5.3.1

cpe:2.3:a:mcafee:epolicy_orchestrator:5.3.1
Mcafee » Epolicy Orchestrator » Version: 5.3.2

cpe:2.3:a:mcafee:epolicy_orchestrator:5.3.2
Mcafee » Epolicy Orchestrator » Version: 5.3.3

cpe:2.3:a:mcafee:epolicy_orchestrator:5.3.3
Mcafee » Epolicy Orchestrator » Version: 5.9.0

cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0
Mcafee » Epolicy Orchestrator » Version: 5.9.1

cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-3604

Products

Pricing

Contact Us