Low severity3.9NVD Advisory· Published Aug 26, 2020· Updated Jun 17, 2026

CVE-2020-7309

Description

Cross Site Scripting vulnerability in ePO extension in McAfee Application Control (MAC) prior to 8.3.1 allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery section.

Affected products

McAfee/Application And Change Control
cpe:2.3:a:mcafee:application_and_change_control:*:*:*:*:*:*:*:*
Range: <8.3.1
McAfee/Application Controlllm-fuzzy
Range: <8.3.1
McAfee, LLC/McAfee Application and Change Controlv5
Range: 8.3.1

Patches

Vulnerability mechanics

References

kc.mcafee.com/corporate/indexnvd

News mentions

No linked articles in our index yet.

cvss	0.254
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000