Security Advisory

CVE-2020-7329

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-11-11 09:15:15
Last updated 2024-09-17 02:21:36
Assigner trellix
CVSS score 7.2
State PUBLISHED

Description

Server-side request forgery vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers trigger server-side DNS requests to arbitrary domains via carefully constructed XML files loaded by an ePO administrator.