QwikSec

Security Database

CVE

CWE

Training

CVE-2021-31834

Published: Oct 22, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

Stored Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 11 allows ePO administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized.

Vendor	Product	Versions
McAfee,LLC	McAfee ePolicy Orchestrator (ePO)	affected `unspecified - < 5.10 CU 11`

Weaknesses (CWE)

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10366

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.