Lucene search
+L

6 matches found

CNVD
CNVD
•added 2020/10/21 12:00 a.m.•20 views

McAfee ePolicy chistrator (ePO) cross-site scripting vulnerability

McAfee ePolicy Orchistrator ePO is a suite of scalable security management software from McAfee. The software enables centralized, streamlined management of endpoint, network, content security and compliance solutions. A cross-site scripting vulnerability exists in McAfee ePolicy chistrator ePO...

4.6CVSS5.8AI score0.01033EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2020/10/14 7:15 p.m.•17 views

CVE-2020-7317

Cross-Site Scripting vulnerability in McAfee ePolicy Orchistrator ePO prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via parameter values for "syncPointList" not being correctly sanitsed...

4.3CVSS5.9AI score0.00341EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2020/10/14 7:15 p.m.•10 views

CVE-2020-7317

Cross-Site Scripting vulnerability in McAfee ePolicy Orchistrator ePO prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via parameter values for "syncPointList" not being correctly sanitsed...

4.6CVSS5AI score0.00341EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/10/14 12:00 a.m.•5 views

PT-2020-4831

Name of the Vulnerable Software and Affected Versions: McAfee ePolicy Orchestrator versions prior to 5.10.9 Update 9 Description: The issue allows administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized. This can...

4.6CVSS0.01033EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2020/10/14 12:00 a.m.•7 views

PT-2020-19548

Name of the Vulnerable Software and Affected Versions McAfee ePolicy Orchestrator versions prior to 5.10.9 Update 9 Description A Cross-Site Scripting issue allows administrators to inject arbitrary web script or HTML via parameter values for syncPointList not being correctly sanitized...

4.6CVSS0.00341EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/14 12:00 a.m.•12 views

CVE-2020-7317: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting vulnerability in McAfee ePolicy Orchistrator ePO prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via parameter values for "syncPointList" not being correctly sanitsed...

4.6CVSS5.9AI score0.00341EPSS
SaveExploits0References3
Rows per page
Query Builder