CVE-2020-7318 in ePolicy Orchistrator

Sumário

de MITRE • 15/10/2020

Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsável: McAfee
• Reservar: 21/01/2020
• Divulgação: 15/10/2020
• Moderação: aceite
• Entrada: VDB-162704
• CPE: pronto
• CWE: CWE-79 (confirmado)
• CVSS: 4.3 (NVD)
• EPSS: 0.01024
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-7318
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-7318
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-7318/