CVE-2009-5115: McAfee Common Management Agent

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

McAfee Common Management Agent (CMA) 3.5.5 through 3.5.5.588 and 3.6.0 through 3.6.0.608, and McAfee Agent 4.0 before Patch 3, allows remote authenticated users to overwrite arbitrary files by accessing a report-writing ActiveX control COM object.

Affected products

• McAfee Common Management Agent: version 3.5.5.438 only; version 3.5.5.568 only; version 3.5.5.577 only; version 3.5.5.580 only; version 3.5.5.588 only; version 3.6.0.438 only; …

Published 2012-08-22. Last modified 2026-06-16.