CVE-2015-4559

EUVD-2015-4579
Cross-site scripting (XSS) vulnerability in the product deployment feature in the Java core web services in Intel McAfee ePolicy Orchestrator (ePO) before 5.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 49%
Affected Products (NVD)
VendorProductVersion
mcafeeepolicy_orchestrator
𝑥
≤ 5.1.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/91539
http://www.securitytracker.com/id/1032671
https://kc.mcafee.com/corporate/index?page=content&id=SB10121
http://www.securityfocus.com/bid/91539
http://www.securitytracker.com/id/1032671
https://kc.mcafee.com/corporate/index?page=content&id=SB10121