CVE-2017-3907

MEDIUM · CVSS 5.4 EPSS 1.58%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-06-13 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2017-3907

Severity

MEDIUM

CVSS

5.4

EPSS

1.58%

Exchange

Original Filing — NVD Description

Code Injection vulnerability in the ePolicy Orchestrator (ePO) extension in McAfee Threat Intelligence Exchange (TIE) Server 2.1.0 and earlier allows remote attackers to execute arbitrary HTML code to be reflected in the response web page via unspecified vector.