What’s Vulnerable › Vulnerabilities

CVE-2017-3907: McAfee Threat Intelligence Exchange (TIE) Server - Code Injection vulnerability

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-06-13 · updated 2026-06-17
• Weakness: CWE-94

Description

Code Injection vulnerability in the ePolicy Orchestrator (ePO) extension in McAfee Threat Intelligence Exchange (TIE) Server 2.1.0 and earlier allows remote attackers to execute arbitrary HTML code to be reflected in the response web page via unspecified vector.

Affected products

• McAfee Threat Intelligence Exchange (TIE) Server: 2.1.0

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10207
• https://kc.mcafee.com/corporate/index?page=content&id=SB10207

Get alerted when CVE-2017-3907 or the next vulnerability affects your stack