CVE-2015-8765

HIGH 8.3CVE-2015-8765 · Published 08/01/2016 · updated 17/06/2026

In short

CVE-2015-8765 is a HIGH (CVSS 8.3) vulnerability affecting epolicy orchestrator (mcafee).
Chance of exploitation in the next 30 days (EPSS): 2.7%, higher than 86.0% of all vulnerabilities.
Fix: update to 5.1.3, 5.3.1 or later.

Package	Affected versions	Patched versions
epolicy orchestrator mcafee	`≥ 5.0.0, ≤ 5.0.1≥ 5.1.0, < 5.1.3≥ 5.3.0, < 5.3.1≤ 4.6.9`	`5.1.35.3.1`

Description

Intel McAfee ePolicy Orchestrator (ePO) 4.6.9 and earlier, 5.0.x, 5.1.x before 5.1.3 Hotfix 1106041, and 5.3.x before 5.3.1 Hotfix 1106041 allow remote attackers to execute arbitrary code via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

References

kc.mcafee.com/corporate/index · Vendor Advisory
kb.cert.org/vuls/id/576313 · Third Party Advisory

More vulnerabilities in epolicy orchestrator

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

epolicy orchestrator

mcafee

≥ 5.0.0, ≤ 5.0.1≥ 5.1.0, < 5.1.3≥ 5.3.0, < 5.3.1≤ 4.6.9

5.1.35.3.1

More vulnerabilities in epolicy orchestrator

See all →