CVE-2015-4559: XSS
Cross-site scripting (XSS) vulnerability in the product deployment feature in the Java core web services in Intel McAfee ePolicy Orchestrator (ePO) before 5.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4559?
CVE-2015-4559 is classified as a Medium severity vulnerability due to its potential for exploitation via cross-site scripting.
How do I fix CVE-2015-4559?
To fix CVE-2015-4559, upgrade your Intel McAfee ePolicy Orchestrator to version 5.1.2 or later.
What applications are affected by CVE-2015-4559?
CVE-2015-4559 affects Intel McAfee ePolicy Orchestrator versions prior to 5.1.2, including 5.1.1 and earlier.
Can CVE-2015-4559 be exploited remotely?
Yes, CVE-2015-4559 can be exploited remotely by attackers through unspecified vectors that allow them to inject web scripts or HTML.
What type of attack does CVE-2015-4559 enable?
CVE-2015-4559 enables cross-site scripting (XSS) attacks, which can lead to the execution of malicious scripts in a user's browser.