Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: McAfee ePolicy Orchistrator (ePO) 5.10.9 update 9 Clear all filters
TI-2020-05921 CVE-2020-7317 · GHSA-4phr-gcpq-3v8p

ePolicy Orchistrator (ePO) - Cross-Site Scripting vulnerability

Priority LOW 21

Cross-Site Scripting vulnerability in McAfee ePolicy Orchistrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via parameter values for "syncPointList" not being correctly s…

CVSS 3.1MEDIUM 4.6 Adjacent network No auth User interaction EPSS 0.00341 Published 2020-10-14 Fixed in 5.10.9 update 9 CWE-79
TI-2020-05922 CVE-2020-7318 · GHSA-9ww8-f379-fqcj

ePolicy Orchistrator (ePO) - Cross-Site Scripting vulnerability

Priority LOW 23

Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were…

CVSS 3.1MEDIUM 4.6 Adjacent network No auth User interaction EPSS 0.01033 Published 2020-10-14 Fixed in 5.10.9 update 9 CWE-79