CVE-2022-0857: ePO Reflected Cross-site scripting vulnerability
A reflected cross-site scripting (XSS) vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote attacker to potentially obtain access to an ePO administrator's session by convincing the attacker to click on a carefully crafted link. This would lead to limited access to sensitive information and limited ability to alter some information in ePO due to the area of the User Interface the vulnerability is present in.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-0857?
CVE-2022-0857 is a reflected cross-site scripting (XSS) vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13.
How does CVE-2022-0857 impact McAfee ePolicy Orchestrator?
CVE-2022-0857 allows a remote attacker to potentially obtain access to an ePO administrator's session by convincing them to click on a carefully crafted link.
What is the severity of CVE-2022-0857?
CVE-2022-0857 has a severity rating of 6.1 (medium).
How can I fix CVE-2022-0857?
To fix CVE-2022-0857, update McAfee ePolicy Orchestrator to version 5.10 Update 13 or later.
Where can I find more information about CVE-2022-0857?
You can find more information about CVE-2022-0857 on the McAfee Knowledge Center: https://kc.mcafee.com/corporate/index?page=content&id=SB10379