CVE-2020-7318
ePolicy Orchistrator (ePO) - Cross-Site Scripting vulnerability
MEDIUM 4.3EPSS 1.0%
Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized.
- Affected
- McAfee · ePolicy Orchistrator (ePO)
- CVSS v3.1 NVD
- 4.3 MEDIUM
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N - CVSS v3.1 TRELLIX
- 4.6 MEDIUM
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N - CVSS v2.0 NVD
- 2.3 LOW
AV:A/AC:M/Au:S/C:N/I:P/A:N - EPSS
- 1.03% chance of exploitation in the next 30 days, 63rd percentile
- Nuclei
- medium · CWE-79
- Published
- 2020-10-14
- Updated
- 2024-08-04