CVE-2020-7309: Cross Site Scripting vulnerability in ePO extension of MACC
Cross Site Scripting vulnerability in ePO extension in McAfee Application Control (MAC) prior to 8.3.1 allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-7309?
The severity of CVE-2020-7309 is medium (4.8).
How does CVE-2020-7309 affect McAfee Application Control?
CVE-2020-7309 allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery section of McAfee Application Control.
Which version of McAfee Application Control is affected by CVE-2020-7309?
McAfee Application Control prior to version 8.3.1 is affected by CVE-2020-7309.
How can I fix CVE-2020-7309?
To fix CVE-2020-7309, update McAfee Application Control to version 8.3.1 or newer.
Where can I find more information about CVE-2020-7309?
More information about CVE-2020-7309 can be found at the following link: [https://kc.mcafee.com/corporate/index?page=content&id=SB10324](https://kc.mcafee.com/corporate/index?page=content&id=SB10324)