CVE-2015-0921

概要

参考情報

• packetstormsecurity.com/files/129827/McAfee-ePolicy-Orchestrator-Authenticated-XXE-Credential-Exposure.html · Exploit
• seclists.org/fulldisclosure/2015/Jan/37 · Mailing List
• seclists.org/fulldisclosure/2015/Jan/8 · Mailing List
• secunia.com/advisories/61922
• securitytracker.com/id/1031519
• exchange.xforce.ibmcloud.com/vulnerabilities/99950
• gist.github.com/brandonprry/692e553975bf29aeaf2c
• kc.mcafee.com/corporate/index · Patch

epolicy orchestrator のその他の脆弱性

• CVE-2023-5445中 5.4 An open redirect vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2, allows a remote low privileged user to modify the URL …
• CVE-2023-5444高 8.0 A Cross Site Request Forgery vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2 allows a remote low privilege user to succe…
• CVE-2023-3946中 6.1 A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 SP1 Update 1allows a remote unauthenticated attacker to potential…
• CVE-2022-3339中 6.1A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 Update 14 allows a remote unauthenticated attacker to potentially …
• CVE-2022-3338中 5.4An External XML entity (XXE) vulnerability in ePO prior to 5.10 Update 14 can lead to an unauthenticated remote attacker to potentially trig…