CVE-2020-7329: McAfee Mvision Endpoint

High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days.

Server-side request forgery vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers trigger server-side DNS requests to arbitrary domains via carefully constructed XML files loaded by an ePO administrator.

Affected products

• McAfee Mvision Endpoint: before 20.11 (fixed in 20.11)

Published 2020-11-11. Last modified 2026-06-17.