← CVE Intelligence

CVE-2022-0861

ePO XML extended entity vulnerability PUBLISHED

Description (CNA)

A XML Extended entity vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote administrator attacker to upload a malicious XML file through the extension import functionality. The impact is limited to some access to confidential information and some ability to alter data.

Affected (CNA)

Vendor / productVersions
McAfee,LLC / McAfee ePolicy Orchestrator (ePO)affected unspecified before 5.10 CU 13

CWE

CWE-611

References

ADP enrichment

CVE

No English description supplied.