CVE-2020-7333: Cross-site Scripting (XSS) in firewall ePO extension of McAfee Endpoint Security (ENS)
Published Nov 12, 2020
·Updated
Cross site scripting vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows administrators to inject arbitrary web script or HTML via the configuration wizard.
Affected Software
1 affected component
McAfee Endpoint Security Windows<10.7.0
Event History
Nov 12, 2020
CVE Published
via MITRE·09:50 AM
Data Sourced
via MITRE·09:50 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this cross site scripting vulnerability?
The vulnerability ID for this cross site scripting vulnerability is CVE-2020-7333.
2
What is the affected software for this vulnerability?
The affected software is McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update.
3
How does the vulnerability occur?
The vulnerability occurs when administrators inject arbitrary web script or HTML via the configuration wizard of the firewall ePO extension of McAfee Endpoint Security (ENS).
4
What is the severity of this vulnerability?
The severity of this vulnerability is medium.
5
How can I fix this vulnerability?
To fix this vulnerability, update McAfee Endpoint Security (ENS) to version 10.7.0 November 2020 Update or later.