CVE-2020-7332

Published: Nov 12, 2020Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Cross Site Request Forgery vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows an attacker to execute arbitrary HTML code due to incorrect security configuration.

Affected (1)

Products: Mcafee: Endpoint Security

Mcafee

1 product

Endpoint Security

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mcafee Endpoint Security	Before 10.6.1

Related CWEs

CWE-352

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10335

Source: trellixpsirt@trellix.com

Broken LinkVendor Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10335

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkVendor Advisory

Timeline

No history available yet.