CVE-2020-7317

CVE-2020-7317 affects McAfee ePolicy Orchestrator (ePO) prior to 5.10.9 Update 9, enabling cross-site scripting via the syncPointList parameter due to insufficient sanitization. Related notes from Red Hat and Nessus entries align with an XSS issue in ePO; NCSC advisories indicate fixes in 5.9.1 a...

CVE-2020-7317 ePolicy Orchistrator (ePO) - Cross-Site Scripting vulnerability

Cross-Site Scripting vulnerability in McAfee ePolicy Orchistrator ePO prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via parameter values for "syncPointList" not being correctly sanitsed...