CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-23888

Unvalidated client-side URL redirect vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 could cause an authenticated ePO user to load an untrusted site in an ePO iframe which could steal information from the authenticated user.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 62.3%

CVSS Severity

CVSS v3 Score 6.3

CVSS v2 Score 4.9

References

Products affected by CVE-2021-23888

Mcafee » Epolicy Orchestrator » Version: N/A

cpe:2.3:a:mcafee:epolicy_orchestrator:-
Mcafee » Epolicy Orchestrator » Version: 2.0

cpe:2.3:a:mcafee:epolicy_orchestrator:2.0
Mcafee » Epolicy Orchestrator » Version: 2.5

cpe:2.3:a:mcafee:epolicy_orchestrator:2.5
Mcafee » Epolicy Orchestrator » Version: 2.5.1

cpe:2.3:a:mcafee:epolicy_orchestrator:2.5.1
Mcafee » Epolicy Orchestrator » Version: 3.0

cpe:2.3:a:mcafee:epolicy_orchestrator:3.0
Mcafee » Epolicy Orchestrator » Version: 3.5.0

cpe:2.3:a:mcafee:epolicy_orchestrator:3.5.0
Mcafee » Epolicy Orchestrator » Version: 3.6.0

cpe:2.3:a:mcafee:epolicy_orchestrator:3.6.0
Mcafee » Epolicy Orchestrator » Version: 3.6.1

cpe:2.3:a:mcafee:epolicy_orchestrator:3.6.1
Mcafee » Epolicy Orchestrator » Version: 4.0

cpe:2.3:a:mcafee:epolicy_orchestrator:4.0
Mcafee » Epolicy Orchestrator » Version: 4.5.0

cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.0
Mcafee » Epolicy Orchestrator » Version: 4.5.3

cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.3
Mcafee » Epolicy Orchestrator » Version: 4.5.4

cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.4
Mcafee » Epolicy Orchestrator » Version: 4.5.5

cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.5
Mcafee » Epolicy Orchestrator » Version: 4.5.6

cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.6
Mcafee » Epolicy Orchestrator » Version: 4.5.7

cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.7
Mcafee » Epolicy Orchestrator » Version: 4.6.0

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.0
Mcafee » Epolicy Orchestrator » Version: 4.6.1

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.1
Mcafee » Epolicy Orchestrator » Version: 4.6.2

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.2
Mcafee » Epolicy Orchestrator » Version: 4.6.3

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.3
Mcafee » Epolicy Orchestrator » Version: 4.6.4

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.4
Mcafee » Epolicy Orchestrator » Version: 4.6.5

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.5
Mcafee » Epolicy Orchestrator » Version: 4.6.6

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.6
Mcafee » Epolicy Orchestrator » Version: 4.6.7

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.7
Mcafee » Epolicy Orchestrator » Version: 4.6.8

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.8
Mcafee » Epolicy Orchestrator » Version: 4.6.9

cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.9
Mcafee » Epolicy Orchestrator » Version: 5.0.0

cpe:2.3:a:mcafee:epolicy_orchestrator:5.0.0
Mcafee » Epolicy Orchestrator » Version: 5.0.1

cpe:2.3:a:mcafee:epolicy_orchestrator:5.0.1
Mcafee » Epolicy Orchestrator » Version: 5.1.0

cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.0
Mcafee » Epolicy Orchestrator » Version: 5.1.1

cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.1
Mcafee » Epolicy Orchestrator » Version: 5.1.2

cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.2
Mcafee » Epolicy Orchestrator » Version: 5.1.3

cpe:2.3:a:mcafee:epolicy_orchestrator:5.1.3
Mcafee » Epolicy Orchestrator » Version: 5.10.0

cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0
Mcafee » Epolicy Orchestrator » Version: 5.3.0

cpe:2.3:a:mcafee:epolicy_orchestrator:5.3.0
Mcafee » Epolicy Orchestrator » Version: 5.3.1

cpe:2.3:a:mcafee:epolicy_orchestrator:5.3.1
Mcafee » Epolicy Orchestrator » Version: 5.3.2

cpe:2.3:a:mcafee:epolicy_orchestrator:5.3.2
Mcafee » Epolicy Orchestrator » Version: 5.3.3

cpe:2.3:a:mcafee:epolicy_orchestrator:5.3.3
Mcafee » Epolicy Orchestrator » Version: 5.9.0

cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0
Mcafee » Epolicy Orchestrator » Version: 5.9.1

cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-23888

Products

Pricing

Contact Us