CVE-2021-23889

McAfee ePO Cross-site Scripting vulnerability

Low · published March 26, 2021

CVSS v3.1
3.5
EPSS
1%
Percentile
42.3
In the wild
Unconfirmed
What it is

Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 allows ePO administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00506 · 42.3th percentile
Published
2021-03-26T09:30Z
EPSS history
Timeline
  • 26 MAR 09:30Z
    McAfee ePO Cross-site Scripting vulnerability
    cvelistv5