CVE-2018-6672: McAfee Epolicy Orchestrator

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Information disclosure vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows authenticated users to view sensitive information in plain text format via unspecified vectors.

Affected products

• McAfee Epolicy Orchestrator: from 5.3.0, up to and including 5.3.3; from 5.9.0, up to and including 5.9.1

Published 2018-06-15. Last modified 2026-06-17.