CVE-2004-0038

HIGH 7.5CVE-2004-0038 · Published 14/06/2004 · updated 16/06/2026

In short

CVE-2004-0038 is a HIGH (CVSS 7.5) vulnerability affecting epolicy orchestrator (mcafee).
Chance of exploitation in the next 30 days (EPSS): 3.2%, higher than 88.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
epolicy orchestrator mcafee	`= 2.5= 2.5.1= 3.0`	No fix yet

Description

McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81.

References

download.nai.com/products/patches/ePO/v2.x/Patch14.txt · Vendor Advisory
osvdb.org/5626 · Patch
securityfocus.com/bid/10200 · Patch
xforce.iss.net/xforce/alerts/id/173 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/14166

More vulnerabilities in epolicy orchestrator

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

epolicy orchestrator

mcafee

= 2.5= 2.5.1= 3.0

No fix yet

More vulnerabilities in epolicy orchestrator

See all →