McAfee Common Management Agent vulnerabilities

5 CVEs affecting McAfee Common Management Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-5115, published 2012-08-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-5273, published 2007-07-12. High severity, CVSS 7.6. EPSS: 6.3% chance of exploitation in the next 30 days. Heap-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 through 3.6.0.453 allows remote attackers to…
CVE-2006-5274, published 2007-07-12. High severity, CVSS 7.6. EPSS: 5% chance of exploitation in the next 30 days. Integer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 allows remote attackers to cause a denial of service (CMA…
CVE-2006-5272, published 2007-07-12. High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days. Stack-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.6.0.453 and earlier allows remote attackers to execute…
CVE-2009-5115, published 2012-08-22. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. McAfee Common Management Agent (CMA) 3.5.5 through 3.5.5.588 and 3.6.0 through 3.6.0.608, and McAfee Agent 4.0 before Patch 3, allows remote authenticated users to overwrite arbitrary files by…
CVE-2005-4505, published 2005-12-23. High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days. Unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5) might allow local users to gain privileges via a malicious "program.exe" file in the C:…