CVE-2015-0921

XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 allows remote…

published January 9, 2015

CVSS

—

EPSS

17%

Percentile

97.1

In the wild

Unconfirmed

What it is

XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 allows remote authenticated users to read arbitrary files via the conditionXML parameter to the taskLogTable to orionUpdateTableFilter.do.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.17355 · 97.1th percentile
Published: 2015-01-09T18:00Z

EPSS history

Timeline

09 JAN 18:00Z
XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 allows remote…
cvelistv5