CVE-2018-6659

SB10228 ePO Reflected Cross-Site Scripting vulnerability

State: Published
Severity: 3.7 Low
Published: Apr 2, 2018
Updated: Sep 16, 2024
Reserved: Feb 6, 2018

Description

Reflected Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows remote authenticated users to exploit an XSS issue via not sanitizing the user input.

Scores

CVSS	Score	Vector	Source
3.0	3.7 Low	CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L	trellix

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
ePolicy Orchestrator (ePO)McAfee	5.3.2Affected 5.3.1Affected 5.3.0Affected 5.9.0Affected

References

103392vdb-entry
1040884vdb-entry
https://kc.mcafee.com/corporate/index?page=content&id=SB10228

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.