{"id":"CVE-2015-0921","aliases":["EUVD-2015-0929","GHSA-9wr3-hxwc-qrxf"],"status":"published","title":"XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator ...","description":"XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 allows remote authenticated users to read arbitrary files via the conditionXML parameter to the taskLogTable to orionUpdateTableFilter.do.","severity":{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.17355,"percentile":0.97134,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2015-01-09T18:00:00Z","modified":"2026-06-17T00:21:09Z","exploits":[{"source":"metasploit","id":"auxiliary/gather/mcafee_epo_xxe","title":"McAfee ePolicy Orchestrator Authenticated XXE Credentials Exposure","type":"auxiliary","date":"2015-01-06","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/gather/mcafee_epo_xxe"}],"products":[{"vendor":"mcafee","product":"epolicy_orchestrator"}],"references":[{"url":"http://secunia.com/advisories/61922","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2015/Jan/37","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10095","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/129827/McAfee-ePolicy-Orchestrator-Authenticated-XXE-Credential-Exposure.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2015/Jan/8","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1031519","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/99950","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://gist.github.com/brandonprry/692e553975bf29aeaf2c","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0921"},{"url":"https://github.com/advisories/GHSA-9wr3-hxwc-qrxf"}],"sources":{"cve":[{"id":"CVE-2015-0921","description":"XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 allows remote authenticated users to read arbitrary files via the conditionXML parameter to the taskLogTable to orionUpdateTableFilter.do.","status":"published","published":"2015-01-09T18:00:00Z","modified":"2024-08-06T04:26:11.415Z","updated_at":"2026-11-02T14:35:45.428221Z"}],"euvd":[{"id":"EUVD-2015-0929","description":"XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 allows remote authenticated users to read arbitrary files via the conditionXML parameter to the taskLogTable to orionUpdateTableFilter.do.","status":"published","published":"2015-01-09T18:00:00Z","modified":"2024-08-06T04:26:11Z","updated_at":"2026-11-03T02:22:17.470916Z"}],"ghsa":[{"id":"GHSA-9wr3-hxwc-qrxf","title":"XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator ...","description":"XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 allows remote authenticated users to read arbitrary files via the conditionXML parameter to the taskLogTable to orionUpdateTableFilter.do.","status":"published","published":"2022-05-17T01:10:41Z","modified":"2023-02-03T05:03:18Z","updated_at":"2026-11-02T14:53:20.146851Z"}],"nvd":[{"id":"CVE-2015-0921","description":"XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 allows remote authenticated users to read arbitrary files via the conditionXML parameter to the taskLogTable to orionUpdateTableFilter.do.","status":"published","published":"2015-01-09T18:59:10.6Z","modified":"2026-06-17T00:21:09.263Z","cvss":[{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:01.643178Z"}]}}