Mcafee Epolicy Orchistrator (Epo) vulnerabilities

2 vulnerabilities

Known vulnerabilities in Mcafee Epolicy Orchistrator (Epo), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.6CVE-2020-7317mcafeeepolicy_orchestrator+1
EPSS score
0.34%
Cross-Site Scripting vulnerability in McAfee ePolicy Orchistrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via parameter values for "syncPointList" not being correctly sanitsed.4.6CVE-2020-7318mcafeeepolicy_orchestrator+1
EPSS score
1.02%
Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized.