CVE-2015-0921

MediumCVSS 4.0/10Last modified Jun 17, 2026

Description

XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 allows remote authenticated users to read arbitrary files via the conditionXML parameter to the taskLogTable to orionUpdateTableFilter.do.

Metrics

CVSS 2.0 4.0/10AV:N/AC:L/Au:S/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/129827/McAfee-ePolicy-Orchestrator-Authenticated-XXE-Credential-Exposure.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2015/Jan/37Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2015/Jan/8Mailing List, Third Party Advisory
http://secunia.com/advisories/61922
http://www.securitytracker.com/id/1031519
https://exchange.xforce.ibmcloud.com/vulnerabilities/99950
https://gist.github.com/brandonprry/692e553975bf29aeaf2c
https://kc.mcafee.com/corporate/index?page=content&id=SB10095Patch, Vendor Advisory
http://packetstormsecurity.com/files/129827/McAfee-ePolicy-Orchestrator-Authenticated-XXE-Credential-Exposure.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2015/Jan/37Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2015/Jan/8Mailing List, Third Party Advisory
http://secunia.com/advisories/61922
http://www.securitytracker.com/id/1031519
https://exchange.xforce.ibmcloud.com/vulnerabilities/99950
https://gist.github.com/brandonprry/692e553975bf29aeaf2c
https://kc.mcafee.com/corporate/index?page=content&id=SB10095Patch, Vendor Advisory

Timeline

Published: Jan 9, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-09225.0McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 uses the same secret key across different customers' installations, whic CVE-2015-09235.0The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 befor CVE-2015-09247.8Ceragon FibeAir IP-10 bridges have a default password for the root account, which makes it easier for remote attackers to obtain access via CVE-2015-09259.0The client in iPass Open Mobile before 2.4.5 on Windows allows remote authenticated users to execute arbitrary code via a DLL pathname in a CVE-2015-09266.8Labtech before 100.237 on Linux uses world-writable permissions for root-executed scripts, which allows local users to gain privileges by mo CVE-2015-09287.5libhtp 0.5.15 allows remote attackers to cause a denial of service (NULL pointer dereference).CVE-2015-092910.0time.htm in the web interface on SerVision HVG Video Gateway devices with firmware before 2.2.26a78 allows remote attackers to bypass authen CVE-2015-093010.0The web interface on SerVision HVG Video Gateway devices with firmware before 2.2.26a100 has a hardcoded administrative password, which make CVE-2015-09316.8Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1, when the Saxon XSLT parser is used, allows remote attac CVE-2015-093210.0The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGat CVE-2015-09333.5Absolute path traversal vulnerability in ShareLaTeX 0.1.3 and earlier, when the paranoid openin_any setting is omitted, allows remote authen CVE-2015-09346.5Common LaTeX Service Interface (CLSI) before 0.1.3, as used in ShareLaTeX before 0.1.3, allows remote authenticated users to execute arbitra