CVE-2018-6670
External Entity Attack vulnerability in McAfee Common UI (CUI)
High · published June 7, 2018
What it is
External Entity Attack vulnerability in the ePO extension in McAfee Common UI (CUI) 2.0.2 allows remote authenticated users to view confidential information via a crafted HTTP request parameter.
The record
Technical detail
- CVSS v3.0
- 7.6 · HIGH
- Vector
- CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00971 · 61.6th percentile
- Published
- 2018-06-07T18:00Z
EPSS history
Timeline