← CVE Intelligence

CVE-2020-7329

Server-Side Request Forgery (SSRF) in MVISION Endpoint ePO extension PUBLISHED

Description (CNA)

Server-side request forgery vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers trigger server-side DNS requests to arbitrary domains via carefully constructed XML files loaded by an ePO administrator.

Affected (CNA)

Vendor / productVersions
McAfee, LLC / MVISION Endpoint ePO extensionaffected 20.x through 20.11

CWE

CWE-918

References

ADP enrichment

CVE

No English description supplied.