CVE-2021-23881: falha de média gravidade em McAfee LLC Endpoint Security (ENS) for Windows
Stored Cross Site Scripting in ENS
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.8epss 0.6%
A stored cross site scripting vulnerability in ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 February 2021 Update allows an ENS ePO administrator to add a script to a policy event which will trigger the script to be run through a browser block page when a local non-administrator user triggers the policy.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
McAfee LLC · Endpoint Security (ENS) for WindowsCVEs relacionadas — McAfee LLC Endpoint Security (ENS) for Windows
No mesmo produto, das mais perigosas para as menos.
CVE-2021-23878HIGHClear text storage of sensitive Information in ENSEPSS 0.6%CVE-2021-23880MEDIUMImproper Access Control in the ENS installerEPSS 0.3%CVE-2021-23882HIGHImproper Access Control in the ENS installerEPSS 0.3%CVE-2021-23883MEDIUMNull Pointer Dereference vulnerability in McAfee Endpoint Security (ENS)EPSS 0.3%