McAfee Protectionpilot vulnerabilities

6 CVEs affecting McAfee Protectionpilot, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-5274, published 2007-07-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-5156, published 2006-10-05. High severity, CVSS 10.0. EPSS: 74% chance of exploitation in the next 30 days. Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attackers to execute arbitrary code via a request to /spipe/pkg/ with a long source…
CVE-2007-1498, published 2007-03-16. High severity, CVSS 9.3. EPSS: 7.8% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control (SiteManager.dll) in the ePO management console in McAfee ePolicy Orchestrator (ePO) before 3.6.1 Patch 1 and…
CVE-2006-5273, published 2007-07-12. High severity, CVSS 7.6. EPSS: 6.3% chance of exploitation in the next 30 days. Heap-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 through 3.6.0.453 allows remote attackers to…
CVE-2006-5274, published 2007-07-12. High severity, CVSS 7.6. EPSS: 5% chance of exploitation in the next 30 days. Integer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 allows remote attackers to cause a denial of service (CMA…
CVE-2006-5271, published 2007-07-12. High severity, CVSS 7.6. EPSS: 4% chance of exploitation in the next 30 days. Integer underflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.6.0.453 and earlier allows remote attackers to execute arbitrary…
CVE-2006-5272, published 2007-07-12. High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days. Stack-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.6.0.453 and earlier allows remote attackers to execute…