What is CVE-2020-7332?

CVE-2020-7332 is a high-severity vulnerability in Mcafee Endpoint_security, classified under Cross-Site Request Forgery (CSRF). CVSS score: 7.0/10. Published 2020-11-12.

How severe is CVE-2020-7332?

High severity. CVSS v3 base score is 7.0 out of 10.

CSRF in Mcafee Endpoint_security

CVE-2020-7332

Cross Site Request Forgery vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows an attacker to execute arbitrary HTML code due to incorrect security configuration.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.006 (43.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.0 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L.

Affected products

Mcafee Endpoint_security
Mcafee, Llc Endpoint Security For Windows — versions 10.7.x

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

trellixpsirt@trellix.com (x_refsource_CONFIRM, Broken Link, Vendor Advisory)

Frequently asked questions

What is CVE-2020-7332?: CVE-2020-7332 is a high-severity vulnerability in Mcafee Endpoint_security, classified under Cross-Site Request Forgery (CSRF). CVSS score: 7.0/10. Published 2020-11-12.
How severe is CVE-2020-7332?: High severity. CVSS v3 base score is 7.0 out of 10.