McAfee Epolicy Orchestrator Agent vulnerabilities

3 CVEs affecting McAfee Epolicy Orchestrator Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-4883, published 2013-07-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-4883, published 2013-07-22. Medium severity, CVSS 4.3. EPSS: 5.1% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePO Extension for the McAfee Agent (MA) 4.5 through 4.6, allow remote attackers to inject…
CVE-2013-4882, published 2013-07-22. Medium severity, CVSS 6.5. EPSS: 3.9% chance of exploitation in the next 30 days. Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePolicy Orchestrator (ePO) extension for McAfee Agent (MA) 4.5 and 4.6, allow remote authenticated…
CVE-2006-3623, published 2006-07-18. Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days. Directory traversal vulnerability in Framework Service component in McAfee ePolicy Orchestrator agent 3.5.0.x and earlier allows remote attackers to create arbitrary files via a .. (dot dot) in the…