# Mcafee Epolicy Orchestrator


- [CVE-2016-8027](https://insights.sbomify.com/CVE-2016-8027/): SQL injection in McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier (critical 10.0)
- [CVE-2006-5156](https://insights.sbomify.com/CVE-2006-5156/): Memory corruption in n/a (critical 10.0)
- [CVE-2002-0690](https://insights.sbomify.com/CVE-2002-0690/): Code injection in n/a (critical 10.0)
- [CVE-2007-1498](https://insights.sbomify.com/CVE-2007-1498/): Memory corruption in n/a (critical 9.3)
- [CVE-2015-8765](https://insights.sbomify.com/CVE-2015-8765/): Deserialization in n/a (high 8.3)
- [CVE-2020-2604](https://insights.sbomify.com/CVE-2020-2604/): Deserialization in Java (high 8.1)
- [CVE-2023-5444](https://insights.sbomify.com/CVE-2023-5444/): CSRF in ePO leading to privilege escalation (high 8.0)
- [CVE-2013-0140](https://insights.sbomify.com/CVE-2013-0140/): SQL injection in n/a (high 7.9)
- [CVE-2006-5274](https://insights.sbomify.com/CVE-2006-5274/): Integer overflow in n/a (high 7.6)
- [CVE-2021-30639](https://insights.sbomify.com/CVE-2021-30639/): DoS after non-blocking IO error (high 7.5)
- [CVE-2021-23840](https://insights.sbomify.com/CVE-2021-23840/): Integer overflow in CipherUpdate (high 7.5)
- [CVE-2020-13935](https://insights.sbomify.com/CVE-2020-13935/): Infinite Loop in Apache Tomcat (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/products/mcafee/epolicy-orchestrator/