medium5.4
CVE-2017-3902
Cross-site scripting (XSS) vulnerability in the Web user interface (UI) in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authenticated users to inje…
Impact
Cross-site scripting (XSS) vulnerability in the Web user interface (UI) in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authenticated users to inject malicious Java scripts via bypassing input validation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mcafee | Epolicy Orchestrator | Versions 5.1.0, 5.1.1, 5.1.2, 5.1.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/96465
- http://www.securitytracker.com/id/1037628
- https://kc.mcafee.com/corporate/index?page=content&id=SB10184
- http://www.securityfocus.com/bid/96465
- http://www.securitytracker.com/id/1037628
- https://kc.mcafee.com/corporate/index?page=content&id=SB10184