CVE-2020-7333CWE-79

Cross-site Scripting (XSS) in firewall ePO extension of McAfee Endpoint Security (ENS)

Medium · published November 12, 2020

CVSS v3.1
4.8
EPSS
1%
Percentile
43.1
In the wild
Unconfirmed
What it is

Cross site scripting vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows administrators to inject arbitrary web script or HTML via the configuration wizard.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00517 · 43.1th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2020-11-12T09:50Z
EPSS history
Timeline
  • 12 NOV 09:50Z
    Cross-site Scripting (XSS) in firewall ePO extension of McAfee Endpoint Security (ENS)
    cvelistv5