High severity7.6NVD Advisory· Published Jun 7, 2018· Updated Jun 17, 2026

CVE-2018-6670

Description

External Entity Attack vulnerability in the ePO extension in McAfee Common UI (CUI) 2.0.2 allows remote authenticated users to view confidential information via a crafted HTTP request parameter.

Affected products

McAfee/Common Catalog
cpe:2.3:a:mcafee:common_catalog:*:*:*:*:*:*:*:*
Range: <2.0.3
McAfee/Common UIllm-fuzzy2 versions
= 2.0.2+ 1 more
- (no CPE)range: = 2.0.2
- (no CPE)range: 2.0.2

Patches

Vulnerability mechanics

References

kc.mcafee.com/corporate/indexnvd

News mentions

No linked articles in our index yet.

cvss	0.494
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000