Skip to content
Fencer Intel
medium 4.7

CVE-2018-6671 json

SB10240 - ePolicy Orchestrator (ePO) - Application Protection Bypass vulnerability

published 2018-06-15 8 y ago modified 2026-06-17 4 mo ago also EUVD-2018-18418

cvss
4.7
version 3.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
2.6%
EPSS 2.6% chance of exploitation in 30 days, percentile 85%
public exploits
1
Exploit-DB

Summary

Application Protection Bypass vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows remote authenticated users to bypass localhost only access security protection for some ePO features via a specially crafted HTTP request.

Patch / fix

  • McAfee ePolicy Orchestrator (ePO) 5.3.3 with hotfix EPO5xHF1229850, 5.9.1 with hotfix EPO5xHF1229850

Timeline

  1. Published
  2. First public exploit (EDB-46518)

Exploit prediction

2.58% chance of exploitation in the next 30 days, higher than 85% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

  • EDB-46518 McAfee ePO 5.9.1 - Registered Executable Local Access Bypass webapps, 2019-03-08

CVSS scores

assigned by version score vector
CNA 3.0 4.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
NVD 3.0 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
NVD 2.0 4.0 AV:N/AC:L/Au:S/C:N/I:P/A:N

Affected products

  • McAfee ePolicy Orchestrator (ePO)

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.