CVE-2020-7309CWE-79

Cross Site Scripting vulnerability in ePO extension of MACC

Low · published August 26, 2020

CVSS v3.1
3.9
EPSS
0%
Percentile
29.4
In the wild
Unconfirmed
What it is

Cross Site Scripting vulnerability in ePO extension in McAfee Application Control (MAC) prior to 8.3.1 allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery section.

The record
Technical detail
CVSS v3.1
3.9 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00367 · 29.4th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2020-08-26T06:00Z
EPSS history
Timeline
  • 26 AUG 06:00Z
    Cross Site Scripting vulnerability in ePO extension of MACC
    cvelistv5