CVE-2020-7329CWE-918

Server-Side Request Forgery (SSRF) in MVISION Endpoint ePO extension

High · published November 11, 2020

CVSS v3.1
7.2
EPSS
2%
Percentile
76.3
In the wild
Unconfirmed
What it is

Server-side request forgery vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers trigger server-side DNS requests to arbitrary domains via carefully constructed XML files loaded by an ePO administrator.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01651 · 76.3th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2020-11-11T09:15Z
EPSS history
Timeline
  • 11 NOV 09:15Z
    Server-Side Request Forgery (SSRF) in MVISION Endpoint ePO extension
    cvelistv5