McAfee E-Business Server vulnerabilities

6 CVEs affecting McAfee E-Business Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-0127, published 2008-01-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-0127, published 2008-01-10. High severity, CVSS 8.8. EPSS: 8.6% chance of exploitation in the next 30 days. The administration interface in McAfee E-Business Server 8.5.2 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a long initial authentication…
CVE-2006-5273, published 2007-07-12. High severity, CVSS 7.6. EPSS: 6.3% chance of exploitation in the next 30 days. Heap-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 through 3.6.0.453 allows remote attackers to…
CVE-2007-2957, published 2007-10-31. High severity, CVSS 9.3. EPSS: 6.2% chance of exploitation in the next 30 days. Integer overflow in McAfee E-Business Server before 8.5.3 for Solaris, and before 8.1.2 for Linux, HP-UX, and AIX, allows remote attackers to execute arbitrary code via a large length value in an…
CVE-2006-5271, published 2007-07-12. High severity, CVSS 7.6. EPSS: 4% chance of exploitation in the next 30 days. Integer underflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.6.0.453 and earlier allows remote attackers to execute arbitrary…
CVE-2006-5272, published 2007-07-12. High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days. Stack-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.6.0.453 and earlier allows remote attackers to execute…
CVE-2007-2151, published 2007-04-19. Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days. The administration server in McAfee e-Business Server before 8.1.1 and 8.5.x before 8.5.2 allows remote attackers to cause a denial of service (service crash) via a large length value in a malformed…