PT-2018-7283

Name of the Vulnerable Software and Affected Versions: McAfee Threat Intelligence Exchange TIE Server versions 2.1.0 and earlier Description: A Code Injection issue in the ePolicy Orchestrator ePO extension allows remote attackers to execute arbitrary HTML code, which is then reflected in the...

CVE-2017-3907: Improper Control of Generation of Code

Code Injection vulnerability in the ePolicy Orchestrator ePO extension in McAfee Threat Intelligence Exchange TIE Server 2.1.0 and earlier allows remote attackers to execute arbitrary HTML code to be reflected in the response web page via unspecified vector...