CVE-2013-4882

no score yetEPSS 3.9%

Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePolicy Orchestrator (ePO) extension for McAfee Agent (MA) 4.5 and 4.6, allow remote authenticated users to execute arbitrary SQL commands via the uid parameter to (1) core/showRegisteredTypeDetails.do and (2) EPOAGENTMETA/DisplayMSAPropsDetail.do, a different vulnerability than CVE-2013-0140.

EPSS: 3.9% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2013-07-22
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mcafee:epolicy_orchestrator
mcafee:epolicy_orchestrator_agent

References

http://www.securityfocus.com/archive/1/527228
http://www.securitytracker.com/id/1028803
https://kc.mcafee.com/corporate/index?page=content&id=SB10043
http://www.securityfocus.com/archive/1/527228
http://www.securitytracker.com/id/1028803

Check your stack JSON