5.1.1

DATE	CVE	VULNERABILITY TITLE	RISK
2015-06-15	CVE-2015-4559	Cross-site Scripting vulnerability in Mcafee Epolicy Orchestrator Cross-site scripting (XSS) vulnerability in the product deployment feature in the Java core web services in Intel McAfee ePolicy Orchestrator (ePO) before 5.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. network mcafee CWE-79	4.3
2015-01-09	CVE-2015-0922	Information Exposure vulnerability in Mcafee Epolicy Orchestrator McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 uses the same secret key across different customers' installations, which allows attackers to obtain the administrator password by leveraging knowledge of the encrypted password. network low complexity mcafee CWE-200	5.0
2015-01-09	CVE-2015-0921	Unspecified vulnerability in Mcafee Epolicy Orchestrator XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 allows remote authenticated users to read arbitrary files via the conditionXML parameter to the taskLogTable to orionUpdateTableFilter.do. network low complexity mcafee	4.0