cvedb.io
CVE-2021-31835
MEDIUM · CVSS 4.8
EPSS exploitation probability: 0%
Published 2021-10-22T11:15:07.900 · Last modified 2026-06-17T03:52:19.193

Summary

Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 11 allows ePO administrators to inject arbitrary web script or HTML via a specific parameter where the administrator's entries were not correctly sanitized.

Affected products

mcafee — epolicy_orchestrator

Does this affect you?

Add your gear to cvedb and we'll alert you only when mcafee ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.