McAfee ePolicy Orchestrator <5.10.9 Update 9 - Cross-Site Scripting

McAfee ePolicy Orchestrator before 5.10.9 Update 9 is vulnerable to a cross-site scripting vulnerability that allows administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized. reference: -...

CVE-2020-7318

Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator ePO prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized...

CVE-2020-7318

creationtimestamp| type| source ---|---|--- 2020-10-14 22:39:51+00:00| seen| https://t.me/cibsecurity/15273 2020-12-31 18:34:35+00:00| exploited| https://t.me/CyberSecurityTechnologies/2246 2021-03-24 14:20:37+00:00| published-proof-of-concept| https://t.me/reconshell/586 2021-09-21 06:42:55+00:0...