Vulnerability Description
Reflected Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows remote authenticated users to exploit an XSS issue via not sanitizing the user input.
CVSS Score
3.7
LOW
CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mcafee | Epolicy Orchestrator | 5.3.0 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/103392
- http://www.securitytracker.com/id/1040884
- https://kc.mcafee.com/corporate/index?page=content&id=SB10228
- http://www.securityfocus.com/bid/103392
- http://www.securitytracker.com/id/1040884
- https://kc.mcafee.com/corporate/index?page=content&id=SB10228
FAQ
What is CVE-2018-6659?
CVE-2018-6659 is a vulnerability with a CVSS score of 3.7 (LOW). Reflected Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows remote authenticated users to exploit an XSS issue via not sanitizing the user in...
How severe is CVE-2018-6659?
CVE-2018-6659 has been rated LOW with a CVSS base score of 3.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-6659?
Check the references section above for vendor advisories and patch information. Affected products include: Mcafee Epolicy Orchestrator.