McAfee Cma vulnerabilities

2 CVEs affecting McAfee Cma, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-1855, published 2008-04-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-1855, published 2008-04-16. Medium severity, CVSS 5.0. EPSS: 7.6% chance of exploitation in the next 30 days. FrameworkService.exe in McAfee Common Management Agent (CMA) 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator (ePO) and ProtectionPilot (PrP), allows remote attackers to corrupt memory…
CVE-2008-1357, published 2008-03-17. Medium severity, CVSS 5.4. EPSS: 6.2% chance of exploitation in the next 30 days. Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (Patch 3) and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows…