McAfee Epo Deep Command vulnerabilities

2 CVEs affecting McAfee Epo Deep Command, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-8988, published 2017-03-14.

More from McAfee.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-8988, published 2017-03-14. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. Unquoted executable path vulnerability in Client Management and Gateway components in McAfee (now Intel Security) ePO Deep Command (eDC) 2.2 and 2.1 allows authenticated users to execute a command of…
• CVE-2015-3987, published 2015-05-14. High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days. Multiple unquoted Windows search path vulnerabilities in the (1) Client Management and (2) Gateway in McAfee ePO Deep Command 2.1 and 2.2 before HF 1058831 allow local users to gain privileges via…