title: SB10228 ePO Reflected Cross-Site Scripting vulnerability
description: Reflected Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows remote authenticated users to exploit an XSS issue via not sanitizing the user input.
problem types: Reflected Cross-Site Scripting vulnerability
affected:
{
product: ePolicy Orchestrator (ePO)
vendor: McAfee
versions:
status: affected, version: 5.3.2
status: affected, version: 5.3.1
status: affected, version: 5.3.0
status: affected, version: 5.9.0
}
metrics:
cvssV3_0: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 3.7
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L
version: 3.0
]