Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2017-3907

McAfee Threat Intelligence Exchange (TIE) Server - Code Injection vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
trellix

Description

Code Injection vulnerability in the ePolicy Orchestrator (ePO) extension in McAfee Threat Intelligence Exchange (TIE) Server 2.1.0 and earlier allows remote attackers to execute arbitrary HTML code to be reflected in the response web page via unspecified vector.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

McAfee Threat Intelligence Exchange (TIE) Server

  • 2.1.0 to < 2.1.0 Hotfix 1affected

References