Cross-site scripting vulnerability in Intel Security McAfee Endpoint Security (ENS) Web Control before 10.2.0.408.10 allows attackers to inject arbitrary web script or HTML via a crafted web site.
CVSS 3.0MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00551·Published 2017-03-14·Fixed in 10.2.0.408.10CWE-79