McAfee ePolicy Orchestrator Multiple Cross-Site Scripting Vulnerabilities
Last Update Date:
17 Jul 2013 12:57
Release Date:
17 Jul 2013
3261
Views
RISK: Medium Risk
TYPE: Security software and application - Security Software & Appliance
Multiple vulnerabilities have been identified in McAfee ePolicy Orchestrator, which can be exploited by malicious people to conduct cross-site scripting attacks.
Input passed via multiple parameters and scripts is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.
Note: No patch is currently available
Impact
- Cross-Site Scripting
System / Technologies affected
- The vulnerabilities are reported in version 4.6.6. Other versions may also be affected.
Solutions
- Note: No patch is currently available.
A Patch is scheduled to be released in late Q3 2013
Vulnerability Identifier
- No CVE information is available
Source
Related Link
Share with