What is CVE-2017-3907?

CVE-2017-3907 is a medium-severity vulnerability in Mcafee Threat Intelligence Exchange, classified under Code Injection. CVSS score: 5.4/10. Published 2018-06-13.

How severe is CVE-2017-3907?

Medium severity. CVSS v3 base score is 5.4 out of 10.

RCE in Mcafee Threat Intelligence Exchange

CVE-2017-3907

Code Injection vulnerability in the ePolicy Orchestrator (ePO) extension in McAfee Threat Intelligence Exchange (TIE) Server 2.1.0 and earlier allows remote attackers to execute arbitrary HTML code to be reflected in the response web page via unspecified vector.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.016 (73.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L.

Affected products

Mcafee Mcafee_threat_intelligence_exchange — versions 2.1.0
Mcafee Threat Intelligence Exchange (Tie) Server — versions 2.1.0

Weakness classification (CWE)

CWE-94 — Code Injection

References

trellixpsirt@trellix.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2017-3907?: CVE-2017-3907 is a medium-severity vulnerability in Mcafee Threat Intelligence Exchange, classified under Code Injection. CVSS score: 5.4/10. Published 2018-06-13.
How severe is CVE-2017-3907?: Medium severity. CVSS v3 base score is 5.4 out of 10.