CVE-2018-6671

6.5 mediumEPSS 2.6%

Medium (6.5) in mcafee epolicy orchestrator. EPSS 2.6% chance of exploitation in the next 30 days.

Application Protection Bypass vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows remote authenticated users to bypass localhost only access security protection for some ePO features via a specially crafted HTTP request.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
Published: 2018-06-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mcafee:epolicy_orchestrator

References

http://www.securityfocus.com/bid/104485
http://www.securitytracker.com/id/1041155
https://kc.mcafee.com/corporate/index?page=content&id=SB10240
https://www.exploit-db.com/exploits/46518/
http://www.securityfocus.com/bid/104485

Check your stack JSON