[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5pvMfFEumFUneBh8wKqRVkFLhWY7CZA9CYqEPMfT6_A":3,"g5a-risk:CVE-2015-0921":167},{"success":4,"data":5,"meta":165},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":30,"epssPercentile":15,"epssTimeSeries":31,"severity":32,"affectedProducts":33,"affectedProductsCount":51,"references":52,"referencesCount":106,"weaknesses":107,"weaknessesCount":111,"isActivelyExploited":112,"cisaInfo":15,"otxData":15,"relatedBlogPosts":113,"seoMetadata":114,"configurations":139,"relatedVendorCves":156,"notableEvents":157},"CVE-2015-0921","What is CVE-2015-0921?","XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 allows remote authenticated users to read arbitrary files via the conditionXML parameter to the taskLogTable to orionUpdateTableFilter.do.","XML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 allows remote authentic...","2015-01-09T18:59:10.6","2025-04-12T10:46:40.837",4,"AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":27,"ExploitabilityScore":28,"ImpactScore":29,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","LOW","SINGLE","PARTIAL","NONE","MEDIUM",8,2.9,0.17355,[30,30,30,30,30,30,30],"Medium",[34,39,42,45,48],{"vendor":35,"product":36,"version":37,"criteria":38,"vulnerable":4},"mcafee","epolicy_orchestrator","*","cpe:2.3:a:mcafee:epolicy_orchestrator:*:*:*:*:*:*:*:*",{"vendor":35,"product":36,"version":40,"criteria":41,"vulnerable":4},"5.0.0","cpe:2.3:a:mcafee:epolicy_orchestrator:5.0.0:*:*:*:*:*:*:*",{"vendor":35,"product":36,"version":43,"criteria":44,"vulnerable":4},"5.0.1","cpe:2.3:a:mcafee:epolicy_orchestrator:5.0.1:*:*:*:*:*:*:*",{"vendor":35,"product":36,"version":46,"criteria":47,"vulnerable":4},"5.1.0","cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.0:*:*:*:*:*:*:*",{"vendor":35,"product":36,"version":49,"criteria":50,"vulnerable":4},"5.1.1","cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.1:*:*:*:*:*:*:*",5,[53,60,65,68,72,76,80,84,90,92,94,96,98,100,102,104],{"url":54,"source":55,"tags":56},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F129827\u002FMcAfee-ePolicy-Orchestrator-Authenticated-XXE-Credential-Exposure.html","Packetstormsecurity",[57,58,59],"Exploit","Third Party Advisory","VDB Entry",{"url":61,"source":62,"tags":63},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2015\u002FJan\u002F37","Seclists",[64,58],"Mailing List",{"url":66,"source":62,"tags":67},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2015\u002FJan\u002F8",[64,58],{"url":69,"source":70,"tags":71},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F61922","Secunia",[],{"url":73,"source":74,"tags":75},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1031519","Securitytracker",[],{"url":77,"source":78,"tags":79},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F99950","Ibmcloud",[],{"url":81,"source":82,"tags":83},"https:\u002F\u002Fgist.github.com\u002Fbrandonprry\u002F692e553975bf29aeaf2c","GitHub",[],{"url":85,"source":86,"tags":87},"https:\u002F\u002Fkc.mcafee.com\u002Fcorporate\u002Findex?page=content&id=SB10095","Mcafee",[88,89],"Patch","Vendor Advisory",{"url":54,"source":55,"tags":91},[57,58,59],{"url":61,"source":62,"tags":93},[64,58],{"url":66,"source":62,"tags":95},[64,58],{"url":69,"source":70,"tags":97},[],{"url":73,"source":74,"tags":99},[],{"url":77,"source":78,"tags":101},[],{"url":81,"source":82,"tags":103},[],{"url":85,"source":86,"tags":105},[88,89],16,[108],{"id":109,"name":109,"description":110},"Unknown","NVD-CWE-Other",1,false,[],{"title":115,"metaDescription":116,"keywords":117,"canonicalUrl":118,"structuredData":119},"What is CVE-2015-0921? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2015-0921, a medium severity cyber security vulnerability from 2015. XML external entity (XXE) vulnerability in the Server Task...","CVE-2015-0921, CVE-2015-0921 vulnerability, CVE-2015-0921 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2015, CVSS score, exploit, patch, remediation, mcafee security, epolicy_orchestrator vulnerability","\u002Fwhat-is\u002Fcve-2015-0921",{"@context":120,"@type":121,"headline":115,"description":116,"datePublished":10,"dateModified":11,"author":122,"publisher":126,"about":130,"mainEntityOfPage":134,"articleSection":137,"keywords":138},"https:\u002F\u002Fschema.org","TechArticle",{"@type":123,"name":124,"url":125},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":123,"name":124,"url":125,"logo":127},{"@type":128,"url":129},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":131,"name":6,"description":132,"additionalType":133},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":135,"@id":136},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2015-0921","Cybersecurity","CVE-2015-0921, CVE-2015-0921 vulnerability, CVE-2015-0921 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[140],{"Operator":15,"Negate":15,"Nodes":141},[142],{"Operator":143,"Negate":15,"CPEMatch":144},"OR",[145,148,150,152,154],{"Vulnerable":4,"Criteria":38,"MatchCriteriaID":146,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":147},"013D7347-100A-454B-997B-E74E65B1C8D7","4.6.8",{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":149,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"BD14FE96-A47F-4C92-90E8-678D93BB4CB3",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":151,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"648AAB2A-310B-493E-89DF-E8BCA56FB6FD",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":153,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DE33AFB8-9962-4D75-B613-D5032A0949A1",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":155,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"CEBA52A8-233F-4015-B44B-1BF7B5593CCE",[],[158],{"id":159,"eventType":160,"eventTime":161,"details":162,"label":163,"color":164},"376a3ae9-6298-4824-83d8-8d52efefb609","LOW_EPSS_DELTA","2026-06-16T04:06:39.3265+00:00","Daily EPSS score decreased by 0.409 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":166,"version":21},1792347451722,{"score":168,"band":169,"action":170,"scoredAt":171},38,"Low","Monitor","2026-10-17T07:35:39.78154+00:00"]