CVE-2017-3902

Description

Cross-site scripting (XSS) vulnerability in the Web user interface (UI) in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authenticated users to inject malicious Java scripts via bypassing input validation.

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10184

http://www.securitytracker.com/id/1037628

http://www.securityfocus.com/bid/96465

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3