CVEvulnerability

CVE-2013-0140

7.9 HIGH Published 2013-05-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-05-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.9 HIGH — AV:A/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-89

Description

SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel.

Affected configurations

• mcafee epolicy orchestrator (<= 4.5.6) • mcafee epolicy orchestrator 2.0 • mcafee epolicy orchestrator 2.5 • mcafee epolicy orchestrator 2.5.1 • mcafee epolicy orchestrator 3.0 • mcafee epolicy orchestrator 3.5.0 • mcafee epolicy orchestrator 3.6.0 • mcafee epolicy orchestrator 3.6.1 • mcafee epolicy orchestrator 4.0 • mcafee epolicy orchestrator 4.5.0 • mcafee epolicy orchestrator 4.5.3 • mcafee epolicy orchestrator 4.5.4 • mcafee epolicy orchestrator 4.5.5 • mcafee epolicy orchestrator 4.6.0 • mcafee epolicy orchestrator 4.6.1 • mcafee epolicy orchestrator 4.6.2 • mcafee epolicy orchestrator 4.6.3 • mcafee epolicy orchestrator 4.6.4 • mcafee epolicy orchestrator 4.6.5

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References