CVE-2014-2205

Published: Feb 26, 2014Modified: Apr 29, 2026

6.3

Vector

AV:N/AC:M/Au:S/C:C/I:N/A:N

Exploitability: 6.8 / Impact: 6.9

Source: NVD

Description

The Import and Export Framework in McAfee ePolicy Orchestrator (ePO) before 4.6.7 Hotfix 940148 allows remote authenticated users with permissions to add dashboards to read arbitrary files by importing a crafted XML file, related to an XML External Entity (XXE) issue.

Affected (8)

Products: Mcafee: Epolicy Orchestrator

Mcafee

1 product

Epolicy Orchestrator

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Mcafee Epolicy Orchestrator	Up to 4.6.7
Mcafee Epolicy Orchestrator	Version 4.6.0
Mcafee Epolicy Orchestrator	Version 4.6.1
Mcafee Epolicy Orchestrator	Version 4.6.2
Mcafee Epolicy Orchestrator	Version 4.6.3
Mcafee Epolicy Orchestrator	Version 4.6.4
Mcafee Epolicy Orchestrator	Version 4.6.5
Mcafee Epolicy Orchestrator	Version 4.6.6