CVE-2017-3907medium

CVE-2017-3907: medium-severity vulnerability in McAfee Threat Intelligence Exchange (TIE) Server

McAfee Threat Intelligence Exchange (TIE) Server - Code Injection vulnerability

Published · Updated

Follow this CVE+ Monitor Threat Intelligence Exchange Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.4epss 1.6%
Code Injection vulnerability in the ePolicy Orchestrator (ePO) extension in McAfee Threat Intelligence Exchange (TIE) Server 2.1.0 and earlier allows remote attackers to execute arbitrary HTML code to be reflected in the response web page via unspecified vector.
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L
Affected products
McAfee · Threat Intelligence Exchange (TIE) Server