CVE-2022-0861: ePO XML extended entity vulnerability
A XML Extended entity vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote administrator attacker to upload a malicious XML file through the extension import functionality. The impact is limited to some access to confidential information and some ability to alter data.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-0861?
CVE-2022-0861 is a XML Extended entity vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13.
How does CVE-2022-0861 impact McAfee ePolicy Orchestrator?
CVE-2022-0861 allows a remote administrator attacker to upload a malicious XML file through the extension import functionality, causing limited access to confidential information and some ability to perform unauthorized actions.
What is the severity of CVE-2022-0861?
CVE-2022-0861 has a severity rating of 3.8, which is considered medium.
How do I fix CVE-2022-0861?
To fix CVE-2022-0861, you need to update your McAfee Enterprise ePolicy Orchestrator (ePO) to version 5.10 Update 13 or later.
Where can I find more information about CVE-2022-0861?
You can find more information about CVE-2022-0861 on the McAfee website at the following link: [CVE-2022-0861](https://kc.mcafee.com/corporate/index?page=content&id=SB10379)