VYPR
← All advisories
High severity7.0NVD Advisory· Published Nov 12, 2020· Updated Jun 17, 2026

CVE-2020-7332

CVE-2020-7332

Description

Cross Site Request Forgery vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows an attacker to execute arbitrary HTML code due to incorrect security configuration.

Affected products

3
  • Mcafee, LLC/Endpoint Security for Windowsv5
    Range: 10.7.x
  • McAfee/Endpoint Security2 versions
    cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:windows:*:*+ 1 more
    • cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:windows:*:*range: <10.6.1
    • (no CPE)range: <10.7.0 November 2020 Update

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.