CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-0861

A XML Extended entity vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote administrator attacker to upload a malicious XML file through the extension import functionality. The impact is limited to some access to confidential information and some ability to alter data.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 44.3%

CVSS Severity

CVSS v3 Score 3.5

CVSS v2 Score 5.5

References

Products affected by CVE-2022-0861

Mcafee » Epolicy Orchestrator » Version: N/A

cpe:2.3:a:mcafee:epolicy_orchestrator:-
Mcafee » Epolicy Orchestrator » Version: 2.0

cpe:2.3:a:mcafee:epolicy_orchestrator:2.0
Mcafee » Epolicy Orchestrator » Version: 2.5

cpe:2.3:a:mcafee:epolicy_orchestrator:2.5
Mcafee » Epolicy Orchestrator » Version: 2.5.1

cpe:2.3:a:mcafee:epolicy_orchestrator:2.5.1
Mcafee » Epolicy Orchestrator » Version: 3.0

cpe:2.3:a:mcafee:epolicy_orchestrator:3.0
Mcafee » Epolicy Orchestrator » Version: 3.5.0

cpe:2.3:a:mcafee:epolicy_orchestrator:3.5.0
Mcafee » Epolicy Orchestrator » Version: 3.6.0

cpe:2.3:a:mcafee:epolicy_orchestrator:3.6.0
Mcafee » Epolicy Orchestrator » Version: 3.6.1

cpe:2.3:a:mcafee:epolicy_orchestrator:3.6.1
Mcafee » Epolicy Orchestrator » Version: 4.0

cpe:2.3:a:mcafee:epolicy_orchestrator:4.0
Mcafee » Epolicy Orchestrator » Version: 4.5.0

cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.0
Mcafee » Epolicy Orchestrator » Version: 4.5.3

cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.3
Mcafee » Epolicy Orchestrator » Version: 4.5.4

cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.4
Mcafee » Epolicy Orchestrator » Version: 4.5.5

cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.5
Mcafee » Epolicy Orchestrator » Version: 4.5.6

cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.6
Mcafee » Epolicy Orchestrator » Version: 4.5.7

cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.7
Mcafee » Epolicy Orchestrator » Version: 4.6.0

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.0
Mcafee » Epolicy Orchestrator » Version: 4.6.1

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.1
Mcafee » Epolicy Orchestrator » Version: 4.6.2

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.2
Mcafee » Epolicy Orchestrator » Version: 4.6.3

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.3
Mcafee » Epolicy Orchestrator » Version: 4.6.4

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.4
Mcafee » Epolicy Orchestrator » Version: 4.6.5

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.5
Mcafee » Epolicy Orchestrator » Version: 4.6.6

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.6
Mcafee » Epolicy Orchestrator » Version: 4.6.7

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.7
Mcafee » Epolicy Orchestrator » Version: 4.6.8

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.8
Mcafee » Epolicy Orchestrator » Version: 4.6.9

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.9
Mcafee » Epolicy Orchestrator » Version: 5.0.0

cpe:2.3:a:mcafee:epolicy_orchestrator:5.0.0
Mcafee » Epolicy Orchestrator » Version: 5.0.1

cpe:2.3:a:mcafee:epolicy_orchestrator:5.0.1
Mcafee » Epolicy Orchestrator » Version: 5.1.0

cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.0
Mcafee » Epolicy Orchestrator » Version: 5.1.1

cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.1
Mcafee » Epolicy Orchestrator » Version: 5.1.2

cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.2
Mcafee » Epolicy Orchestrator » Version: 5.1.3

cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.3
Mcafee » Epolicy Orchestrator » Version: 5.10.0

cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0
Mcafee » Epolicy Orchestrator » Version: 5.3.0

cpe:2.3:a:mcafee:epolicy_orchestrator:5.3.0
Mcafee » Epolicy Orchestrator » Version: 5.3.1

cpe:2.3:a:mcafee:epolicy_orchestrator:5.3.1
Mcafee » Epolicy Orchestrator » Version: 5.3.2

cpe:2.3:a:mcafee:epolicy_orchestrator:5.3.2
Mcafee » Epolicy Orchestrator » Version: 5.3.3

cpe:2.3:a:mcafee:epolicy_orchestrator:5.3.3
Mcafee » Epolicy Orchestrator » Version: 5.9.0

cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0
Mcafee » Epolicy Orchestrator » Version: 5.9.1

cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-0861

Products

Pricing

Contact Us