CVE-2018-6670: McAfee Common Catalog

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

External Entity Attack vulnerability in the ePO extension in McAfee Common UI (CUI) 2.0.2 allows remote authenticated users to view confidential information via a crafted HTTP request parameter.

Affected products

• McAfee Common Catalog: before 2.0.3 (fixed in 2.0.3)

Published 2018-06-07. Last modified 2026-06-17.