CVE-2022-0842

4.9 mediumEPSS 0.8%

Medium (4.9) in mcafee epolicy orchestrator. EPSS 0.8% chance of exploitation in the next 30 days.

A blind SQL injection vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote authenticated attacker to potentially obtain information from the ePO database. The data obtained is dependent on the privileges the attacker has and to obtain sensitive data the attacker would require administrator privileges.

Severity

CVSS 3.1

4.9 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2022-03-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mcafee:epolicy_orchestrator

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10379
https://kc.mcafee.com/corporate/index?page=content&id=SB10379

Check your stack JSON