Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-93hf-xxfj-6gx3

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

XML Entity Expansion injection vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2021 Update allows a local user to initiate high CPU and memory consumption resulting in a Denial of Service attack through carefully editing the EPDeploy.xml file and then executing the setup process.

XML Entity Expansion injection vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2021 Update allows a local user to initiate high CPU and memory consumption resulting in a Denial of Service attack through carefully editing the EPDeploy.xml file and then executing the setup process.

EPSS

Процентиль: 15%
0.00048
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-611
CWE-776

Связанные уязвимости

CVSS3: 5
nvd
больше 4 лет назад

XML Entity Expansion injection vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2021 Update allows a local user to initiate high CPU and memory consumption resulting in a Denial of Service attack through carefully editing the EPDeploy.xml file and then executing the setup process.

EPSS

Процентиль: 15%
0.00048
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-611
CWE-776