CVE-2020-7318 - CERT CVE
ID CVE-2020-7318
Sažetak Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized.
Reference
CVSS
Base: 2.3
Impact: 2.9
Exploitability:4.4
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK MEDIUM SINGLE
Impact
PovjerljivostCjelovitostDostupnost
NONE PARTIAL NONE
CVSS vektor AV:A/AC:M/Au:S/C:N/I:P/A:N
Zadnje važnije ažuriranje 07-11-2023 - 03:26
Objavljeno 14-10-2020 - 19:15