CVE-2021-31834

Stored Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator ePO prior to 5.10 Update 11 allows ePO administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized...

McAfee ePolicy Orchestrator Multiple Vulnerabilities (SB10366)

The instance of McAfee ePolicy Orchestrator installed on the remote host is affected by the following vulnerabilities: - Stored Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator ePO prior to 5.10 Update 11 allows ePO administrators to inject arbitrary web script or HTML via multip...

CVE-2021-31834

CVE-2021-31834 affects McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 11. Affected component: ePO web interfaces where user-supplied parameters were not properly sanitized, enabling Stored Cross-Site Scripting (XSS). Impact as documented: potential injection of arbitrary web script/HTML b...