Test ID:	1.3.6.1.4.1.25623.1.0.106681
Category:	Web application abuses
Title:	McAfee ePolicy Orchestrator SQL Injection Vulnerability
Summary:	McAfee ePolicy Orchestrator is prone to a blind SQL injection;vulnerability
Description:	Summary: McAfee ePolicy Orchestrator is prone to a blind SQL injection vulnerability Vulnerability Insight: An exploitable blind SQL injection vulnerability exists within ePolicy Orchestrator. A specially crafted HTTP post can allow an attacker to alter a SQL query, which can result in disclosure of information within the database or impersonation of an agent without authentication. Affected Software/OS: ePO versions 5.1.3, 5.3.2 and prior. Solution: Apply the appropriate hotfix. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-8027 BugTraq ID: 95981 http://www.securityfocus.com/bid/95981 http://www.securitytracker.com/id/1037777
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.