CVEvulnerability

CVE-2015-8765

8.3 HIGH Published 2016-01-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-01-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.3 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Intel McAfee ePolicy Orchestrator (ePO) 4.6.9 and earlier, 5.0.x, 5.1.x before 5.1.3 Hotfix 1106041, and 5.3.x before 5.3.1 Hotfix 1106041 allow remote attackers to execute arbitrary code via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

Affected configurations

• mcafee epolicy orchestrator (<= 4.6.9) • mcafee epolicy orchestrator (>= 5.0.0 <= 5.0.1) • mcafee epolicy orchestrator (>= 5.1.0 < 5.1.3) • mcafee epolicy orchestrator (>= 5.3.0 < 5.3.1)

References