CVE-2021-31834CWE-79

McAfee ePO Cross-Site Scripting vulnerability

published October 22, 2021

CVSS
—
EPSS
0%
Percentile
38.6
In the wild
Unconfirmed
What it is

Stored Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 11 allows ePO administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00456 · 38.6th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2021-10-22T11:05Z
EPSS history
Timeline
  • 22 OCT 11:05Z
    McAfee ePO Cross-Site Scripting vulnerability
    cvelistv5