Vulnerability Details CVE-2017-3907
Code Injection vulnerability in the ePolicy Orchestrator (ePO) extension in McAfee Threat Intelligence Exchange (TIE) Server 2.1.0 and earlier allows remote attackers to execute arbitrary HTML code to be reflected in the response web page via unspecified vector.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.6%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 7.5
References
Products affected by CVE-2017-3907
-
cpe:2.3:a:mcafee:mcafee_threat_intelligence_exchange:2.1.0