CVE-2015-8765

high Trellix
CVSS v3 Base Score
8.3
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
EPSS Score
2.3%
Exploitation probability in 30 days
Top 15% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Published: January 8, 2016 (3779 days ago)
Last Modified: May 6, 2026
Vendor: Trellix
Source: NVD

Description

Intel McAfee ePolicy Orchestrator (ePO) 4.6.9 and earlier, 5.0.x, 5.1.x before 5.1.3 Hotfix 1106041, and 5.3.x before 5.3.1 Hotfix 1106041 allow remote attackers to execute arbitrary code via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

CWE

NVD-CWE-Other

Affected Products

mcafee epolicy orchestrator

References

🔗 kc.mcafee.com 🔗 www.kb.cert.org 🔗 kc.mcafee.com 🔗 www.kb.cert.org