What’s Vulnerable › Vulnerabilities

CVE-2018-6670: External Entity Attack vulnerability in McAfee Common UI (CUI)

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-06-07 · updated 2026-06-17
• Weakness: CWE-611

Description

External Entity Attack vulnerability in the ePO extension in McAfee Common UI (CUI) 2.0.2 allows remote authenticated users to view confidential information via a crafted HTTP request parameter.

Affected products

• McAfee Common UI (CUI): before 2.0.3 — fixed in 2.0.3

How to fix

Upgrade to a fixed version: McAfee Common UI (CUI) 2.0.3. Check the vendor advisory for mitigations.

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10236
• https://kc.mcafee.com/corporate/index?page=content&id=SB10236

Get alerted when CVE-2018-6670 or the next vulnerability affects your stack