CVE-2018-6659: SB10228 ePO Reflected Cross-Site Scripting vulnerability

Security readout for executives and security teams

CVE-2018-6659 is a reflected cross-site scripting issue in specific McAfee ePolicy Orchestrator versions. An authenticated remote user could trigger unsafe handling of user input, but exploitation requires user interaction and has low CVSS severity. The main concern is exposure of sensitive information and limited availability impact inside an ePO management context. Exposure is limited to organizations running the named McAfee ePO versions. The issue requires an authenticated remote user and user interaction, so internet exposure of the ePO interface would increase concern, but the source bundle does not state exposed-instance prevalence. Treat this as a low-priority remediation unless affected ePO instances are broadly reachable or used by many administrators. It should be tracked and closed through normal patch governance because ePO is a security-management platform, but sources do not support emergency handling. Mitigation focus: Inventory McAfee ePO deployments and identify versions 5.3.0, 5.3.1, 5.3.2, and 5.9.0.; Review McAfee advisory SB10228 for vendor-supported fixes or mitigations.; Prioritize remediation for ePO instances reachable by many users or less trusted networks..

Prepared

Jun 1, 2026, 15:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.