CVE-2013-4882

Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePolicy Orchestrator (ePO) extension for McAfee Agent (MA) 4.5…

published July 21, 2013

CVSS
—
EPSS
4%
Percentile
90.2
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePolicy Orchestrator (ePO) extension for McAfee Agent (MA) 4.5 and 4.6, allow remote authenticated users to execute arbitrary SQL commands via the uid parameter to (1) core/showRegisteredTypeDetails.do and (2) EPOAGENTMETA/DisplayMSAPropsDetail.do, a different vulnerability than CVE-2013-0140.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03905 · 90.2th percentile
Published
2013-07-21T20:00Z
EPSS history
Timeline
  • 21 JUL 20:00Z
    Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePolicy Orchestrator (ePO) extension for McAfee Agent (MA) 4.5…
    cvelistv5