CVE-2017-3907

9.8 criticalEPSS 1.6%

Critical (9.8) in mcafee mcafee threat intelligence exchange. EPSS 1.6% chance of exploitation in the next 30 days.

Code Injection vulnerability in the ePolicy Orchestrator (ePO) extension in McAfee Threat Intelligence Exchange (TIE) Server 2.1.0 and earlier allows remote attackers to execute arbitrary HTML code to be reflected in the response web page via unspecified vector.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2018-06-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mcafee:mcafee_threat_intelligence_exchange

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10207
https://kc.mcafee.com/corporate/index?page=content&id=SB10207

Check your stack JSON