How many CVEs does McAfee epolicy orchestrator have?

McAfee epolicy orchestrator has 86 published CVE records since 2003.

How many McAfee epolicy orchestrator CVEs are in CISA KEV?

None of McAfee epolicy orchestrator's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for McAfee epolicy orchestrator vulnerabilities?

Yes — 10 of McAfee epolicy orchestrator's CVEs have a known public exploit.

Which versions of McAfee epolicy orchestrator are affected?

60 distinct McAfee epolicy orchestrator versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in McAfee epolicy orchestrator CVEs?

McAfee epolicy orchestrator's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')), CWE-611 (Improper Restriction of XML External Entity Reference), CWE-522 (Insufficiently Protected Credentials).

How many critical McAfee epolicy orchestrator vulnerabilities are there?

McAfee epolicy orchestrator has 5 critical and 17 high-severity CVEs.

What is the average severity of McAfee epolicy orchestrator CVEs?

The average CVSS base score across McAfee epolicy orchestrator's scored CVEs is 5.7.

McAfee epolicy orchestrator Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every McAfee epolicy orchestrator version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

5.10.0 <= v <= 5.10.053 CVEs
5.9.0 <= v <= 5.9.031 CVEs
5.9.1 <= v <= 5.9.128 CVEs
< 5.10.022 CVEs
2.5.1 <= v <= 2.5.18 CVEs
2.5 <= v <= 2.57 CVEs
3.0 <= v <= 3.07 CVEs
4.6.0 <= v <= 4.6.07 CVEs
2.0 <= v <= 2.06 CVEs
3.5.0 <= v <= 3.5.06 CVEs
3.6.0 <= v <= 3.6.06 CVEs
4.6.1 <= v <= 4.6.16 CVEs
4.6.2 <= v <= 4.6.26 CVEs
4.6.3 <= v <= 4.6.36 CVEs
4.6.4 <= v <= 4.6.46 CVEs
4.6.5 <= v <= 4.6.56 CVEs
4.0 <= v <= 4.05 CVEs
5.1.0 <= v <= 5.1.05 CVEs
5.1.1 <= v <= 5.1.15 CVEs
3.6.1 <= v <= 3.6.14 CVEs
4.5.0 <= v <= 4.5.04 CVEs
4.5.3 <= v <= 4.5.33 CVEs
4.5.4 <= v <= 4.5.43 CVEs
4.5.5 <= v <= 4.5.53 CVEs
5.0.0 <= v <= 5.0.03 CVEs
5.0.1 <= v <= 5.0.13 CVEs
5.1.2 <= v <= 5.1.23 CVEs
5.3.0 <= v <= 5.3.33 CVEs
5.3.1 <= v <= 5.3.13 CVEs
5.3.2 <= v <= 5.3.23 CVEs
5.9.0 <= v <= 5.9.13 CVEs
<= 4.5.62 CVEs
<= 4.6.62 CVEs
<= 4.6.82 CVEs
4.6.6 <= v <= 4.6.62 CVEs
5.1.3 <= v <= 5.1.32 CVEs
5.10.0 <= v <= 5.10.92 CVEs
5.3.0 <= v <= 5.3.02 CVEs
5.9.0 <= v < 5.10.02 CVEs
< 5.9.11 CVE
<= 4.6.11 CVE
<= 4.6.71 CVE
<= 4.6.91 CVE
<= 5.1.11 CVE
<= 5.1.31 CVE
<= 5.9.11 CVE
4.5.6 <= v <= 4.5.61 CVE
4.5.7 <= v <= 4.5.71 CVE
4.6.7 <= v <= 4.6.71 CVE
4.6.8 <= v <= 4.6.81 CVE
4.6.9 <= v <= 4.6.91 CVE
5.0.0 <= v <= 5.0.11 CVE
5.1.0 <= v < 5.1.31 CVE
5.1.0 <= v <= 5.1.31 CVE
5.3.0 <= v < 5.3.11 CVE
5.3.0 <= v <= 5.3.21 CVE

Fixed in

5.10.024 CVEs
5.1.31 CVE
5.3.11 CVE
5.9.11 CVE

Find a version

86 CVEs

Sort

Medium vulnerability · 2023-11-17
CVE-2023-5445
Patch
CWE-601
Medium · CVSS 5.4
EPSS 0.4% (34th pct)2023-11-17
High vulnerability · 2023-11-17
CVE-2023-5444
Patch
CWE-352
High · CVSS 8.0
EPSS 0.4% (28th pct)2023-11-17
Medium vulnerability · 2023-07-26
CVE-2023-3946
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.6% (45th pct)2023-07-26
Medium vulnerability · 2022-10-18
CVE-2022-3339
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.6% (46th pct)2022-10-18
Medium vulnerability · 2022-10-18
CVE-2022-3338
Patch
CWE-611
Medium · CVSS 5.4
EPSS 0.5% (40th pct)2022-10-18
Low vulnerability · 2022-03-23
CVE-2022-0861
Patch
CWE-611
Low · CVSS 3.8
EPSS 0.5% (38th pct)2022-03-23
Medium vulnerability · 2022-03-23
CVE-2022-0862
Patch
CWE-522
Medium · CVSS 5.3
EPSS 0.7% (50th pct)2022-03-23
Medium vulnerability · 2022-03-23
CVE-2022-0858
Patch
CWE-79
Medium · CVSS 4.7
EPSS 0.8% (54th pct)2022-03-23
Medium vulnerability · 2022-03-23
CVE-2022-0859
Patch
CWE-522
Medium · CVSS 6.7
EPSS 0.2% (11th pct)2022-03-23
Medium vulnerability · 2022-03-23
CVE-2022-0857
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.7% (51th pct)2022-03-23
Medium vulnerability · 2022-03-23
CVE-2022-0842
Patch
CWE-89
Medium · CVSS 5.4
EPSS 0.8% (53th pct)2022-03-23
Medium vulnerability · 2021-10-22
CVE-2021-31834
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.5% (38th pct)2021-10-22
Medium vulnerability · 2021-10-22
CVE-2021-31835
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.6% (44th pct)2021-10-22
Read buffer overruns processing ASN.1 strings
CVE-2021-3712
Patch
CWE-125
High · CVSS 7.4
EPSS 50.4% (99th pct)2021-08-24
Low vulnerability · 2021-07-20
CVE-2021-2432
Patch
Low · CVSS 3.7
EPSS 3.7% (89th pct)2021-07-20
Medium vulnerability · 2021-07-12
CVE-2021-33037
Patch
CWE-444
Medium · CVSS 5.3
EPSS 75.4% (99th pct)2021-07-12
High vulnerability · 2021-07-12
CVE-2021-30639
Patch
High · CVSS 7.5
EPSS 6.9% (94th pct)2021-07-12
Medium vulnerability · 2021-06-10
CVE-2020-13938
Patch
Medium · CVSS 5.5
EPSS 11.9% (96th pct)2021-06-10
Medium vulnerability · 2021-04-22
CVE-2021-2161
Patch
Medium · CVSS 5.9
EPSS 3.1% (87th pct)2021-04-22
Medium vulnerability · 2021-03-26
CVE-2021-23890
Patch
CWE-200
Medium · CVSS 6.5
EPSS 0.9% (57th pct)2021-03-26
Medium vulnerability · 2021-03-26
CVE-2021-23888
Patch
CWE-601
Medium · CVSS 6.3
EPSS 0.6% (46th pct)2021-03-26
Medium vulnerability · 2021-03-26
CVE-2021-23889
Patch
Medium · CVSS 4.8
EPSS 0.5% (41th pct)2021-03-26
Integer overflow in CipherUpdate
CVE-2021-23840
Patch
CWE-190
High · CVSS 7.5
EPSS 50.7% (99th pct)2021-02-16
Medium vulnerability · 2020-10-21
CVE-2020-14792
Patch
Medium · CVSS 4.2
EPSS 2.2% (82th pct)2020-10-21
Low vulnerability · 2020-10-21
CVE-2020-14782
Patch
Low · CVSS 3.7
EPSS 2.3% (82th pct)2020-10-21
Medium vulnerability · 2020-10-14
CVE-2020-7317
Patch
CWE-79
Medium · CVSS 4.6
EPSS 0.3% (27th pct)2020-10-14
Medium vulnerability · 2020-10-14
CVE-2020-7318
Patch
CWE-79
Medium · CVSS 4.6
EPSS 1.0% (61th pct)2020-10-14
Medium vulnerability · 2020-07-15
CVE-2020-14621
Patch
Medium · CVSS 5.3
EPSS 4.3% (91th pct)2020-07-15
Low vulnerability · 2020-07-15
CVE-2020-14581
Patch
Low · CVSS 3.7
EPSS 3.3% (88th pct)2020-07-15
Low vulnerability · 2020-07-15
CVE-2020-14579
Patch
Low · CVSS 3.7
EPSS 4.0% (90th pct)2020-07-15

Showing 30 of 86

McAfee epolicy orchestrator Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other McAfee products

Frequently asked questions

References

Track McAfee epolicy orchestrator vulnerabilities