Vulnerabilities > Mcafee > EPO Deep Command > 2.2

DATE CVE VULNERABILITY TITLE RISK
2017-03-14 CVE-2015-8988 Command Injection vulnerability in Mcafee EPO Deep Command 2.1/2.2
Unquoted executable path vulnerability in Client Management and Gateway components in McAfee (now Intel Security) ePO Deep Command (eDC) 2.2 and 2.1 allows authenticated users to execute a command of their choice via dropping a malicious file for the path.
network
low complexity
mcafee CWE-77
6.5
2015-05-14 CVE-2015-3987 Untrusted Search Path vulnerability in Mcafee EPO Deep Command 2.1/2.2
Multiple unquoted Windows search path vulnerabilities in the (1) Client Management and (2) Gateway in McAfee ePO Deep Command 2.1 and 2.2 before HF 1058831 allow local users to gain privileges via unspecified vectors.
local
low complexity
mcafee CWE-426
7.2