Description
Cross-Site Scripting vulnerability in McAfee ePolicy Orchistrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via parameter values for "syncPointList" not being correctly sanitsed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| McAfee | ePolicy Orchistrator (ePO) | unspecified – < 5.10.9 update 9 | 5.10.9 update 9 |