A stored cross site scripting vulnerability in ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 February 2021 Update allows an ENS ePO administrator to add a script to a policy event which will trigger the script to be run through a browser block page when a local non-administrator user triggers the policy.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Mcafee Endpoint Security Platform | — | Update McAfee Endpoint Security Platform to version 10.7.0.2421Update McAfee Endpoint Security Platform to version 10.6.1.2286 | Aug 16, 2022 | Feb 10, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub