CVE-2017-3902

Cross-site scripting XSS vulnerability in the Web user interface UI in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authenticated users to inject malicious Java scripts via bypassing input validation...

CVE-2017-3902

CVE-2017-3902 affects Intel Security ePO 5.1.x (prior to 5.1.3 HF1110787). The OpenVAS/Nessus entries describe a reflected XSS in the Web UI of ePO’s computer management services that is exploitable by an authenticated user who is lured into a crafted URL. The vulnerability stems from improper va...