CVE-2020-7332CWE-352

Cross-Site Request Forgery (CSRF) in firewall ePO extension of McAfee Endpoint Security (ENS)

High · published November 12, 2020

CVSS v3.1
7.0
EPSS
1%
Percentile
47.4
In the wild
Unconfirmed
What it is

Cross Site Request Forgery vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows an attacker to execute arbitrary HTML code due to incorrect security configuration.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00588 · 47.4th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2020-11-12T09:45Z
EPSS history
Timeline
  • 12 NOV 09:45Z
    Cross-Site Request Forgery (CSRF) in firewall ePO extension of McAfee Endpoint Security (ENS)
    cvelistv5