VYPR
← All advisories
Medium severity4.8NVD Advisory· Published Nov 12, 2020· Updated Jun 17, 2026

CVE-2020-7333

CVE-2020-7333

Description

Cross site scripting vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows administrators to inject arbitrary web script or HTML via the configuration wizard.

Affected products

3
  • Mcafee, LLC/Endpoint Security for Windowsv5
    Range: 10.7.x
  • McAfee/Endpoint Security2 versions
    cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:windows:*:*+ 1 more
    • cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:windows:*:*range: <10.7.0
    • (no CPE)range: <10.7.0 November 2020 Update

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.