CVE-2020-7309

LOW

McAfee Application Control < 8.3.1 - Authenticated Stored Cross-Site Scripting in Policy Discovery Section

Title source: llm
STIX 2.1

Description

Cross Site Scripting vulnerability in ePO extension in McAfee Application Control (MAC) prior to 8.3.1 allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery section.

References (1)

Core 1
Core References

Scores

CVSS v3 3.9
EPSS 0.0018
EPSS Percentile 39.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L

Details

CWE
CWE-79
Status published
Products (1)
mcafee/application_and_change_control < 8.3.1
Published Aug 26, 2020
Tracked Since Feb 18, 2026