| Package | Affected versions | Patched versions |
|---|---|---|
| epolicy orchestrator | = 5.0.0= 5.0.1= 5.1.0= 5.1.1≤ 4.6.8 |
XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 allows remote authenticated users to read arbitrary files via the conditionXML parameter to the taskLogTable to orionUpdateTableFilter.do.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free