NVD

Id
40391  
Name
CVE-2013-4883  
Description
Multiple cross-site scripting (XSS) vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePO Extension for the McAfee Agent (MA) 4.5 through 4.6, allow remote attackers to inject arbitrary web script or HTML via the (1) instanceId parameter core/loadDisplayType.do; (2) instanceId or (3) monitorUrl parameter to console/createDashboardContainer.do; uid parameter to (4) ComputerMgmt/sysDetPanelBoolPie.do or (5) ComputerMgmt/sysDetPanelSummary.do; (6) uid, (7) orion.user.security.token, or (8) ajaxMode parameter to ComputerMgmt/sysDetPanelQry.do; or (9) uid, (10) orion.user.security.token, or (11) ajaxMode parameter to ComputerMgmt/sysDetPanelSummary.do.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-07-22  
Modified Date
2013-08-22  
Seq
2013-4883  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
205074 40391 CVE-2013-4883 20130712 Multiple vulnerabilities in McAfee ePO 4.6.6  View
205075 40391 CVE-2013-4883 1028803  View
205076 40391 CVE-2013-4883 https://kc.mcafee.com/corporate/index?page=content&id=KB78824  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21915 JVNDB-2013-003490 McAfee ePolicy Orchestrator および McAfee Agent 用 ePolicy Orchestrator エクステンションにおけるクロスサイトスクリプティングの脆弱性 McAfee ePolicy Orchestrator および McAfee Agent (MA) 用 ePolicy Orchestrator (ePO) エクステンションには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-4883 64825 CVE-2013-4883 40391 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003490.html 2013-06-12 2013-07-23 View