Mcafee, LLC Mvision Endpoint Epo Extension vulnerabilities

2 vulnerabilities

Known vulnerabilities in Mcafee, LLC Mvision Endpoint Epo Extension, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2020-7328mcafee, llcmvision endpoint epo extension+1
EPSS score
2.17%
External entity attack vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers to gain control of a resource or trigger arbitrary code execution via improper input validation of an HTTP request, where the content for the attack has been loaded into ePO by an ePO administrator.7.2CVE-2020-7329mcafee, llcmvision endpoint epo extension+1
EPSS score
1.65%
Server-side request forgery vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers trigger server-side DNS requests to arbitrary domains via carefully constructed XML files loaded by an ePO administrator.