{"metadata": {"vulnerability": "cve-2020-7318", "count": 21, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 11}}, "data": [{"timestamp": "2020-01-21T00:00:00Z", "date_only": false, "value": "2020-01-21T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2020-7318", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-10-14T18:20:14Z", "date_only": false, "value": "2020-10-14T18:20:14.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2020-7318", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-10-14T19:15:00Z", "date_only": false, "value": "2020-10-14T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9WW8-F379-FQCJ", "record": "GHSA-9WW8-F379-FQCJ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-10-14T19:15:00Z", "date_only": false, "value": "2020-10-14T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-7318", "record": "GSD-2020-7318", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-10-14T19:15:14.260Z", "date_only": false, "value": "2020-10-14T19:15:14.260", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-7318", "record": "FKIE_CVE-2020-7318", "field": "published"}, {"timestamp": "2020-10-14T22:39:51Z", "date_only": false, "value": "2020-10-14T22:39:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/15273", "record": "CVE-2020-7318", "field": "creation_timestamp", "uuid": "c5910410-62e5-4e98-9133-c8f51d3f32d0", "content": "\u203c CVE-2020-7318 \u203c\n\nCross-Site Scripting vulnerability in McAfee ePolicy Orchistrator (ePO) prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via parameter values for \"syncPointList\" not being correctly sanitsed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/15273"}, {"timestamp": "2020-10-21T00:00:00Z", "date_only": true, "value": "2020-10-21", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-58079", "record": "CNVD-2020-58079", "field": "submitTime"}, {"timestamp": "2020-10-22T00:00:00Z", "date_only": true, "value": "2020-10-22", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-58079", "record": "CNVD-2020-58079", "field": "openTime"}, {"timestamp": "2020-11-09T19:38:05Z", "date_only": false, "value": "2020-11-09T19:38:05.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / trellix", "record": "cve-2020-7318", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-12-23T18:32:00Z", "date_only": false, "value": "2020-12-23T18:32Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-7318", "record": "GSD-2020-7318", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2020-12-31T18:34:35Z", "date_only": false, "value": "2020-12-31T18:34:35.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityTechnologies/2246", "record": "CVE-2020-7318", "field": "creation_timestamp", "uuid": "9c1be0e8-c8a6-4feb-8af5-fbaede04c970", "content": "#Threat_Research\nVulnerabilities in McAfee ePolicy Orchestrator (PoCs for CVE-2020-7318):\n- CSRF + SSRF + MITM = Command Execution;\n- RCE by a logged-in user as the result of a ZipSlip attack;\n- Reflected XSS.\nhttps://swarm.ptsecurity.com/vulnerabilities-in-mcafee-epolicy-orchestrator/\nPoC: \n/PolicyMgmt/policyDetailsCard.do?poID=19&typeID=3&prodID=%27%22%3E%3Csvg%2fonload%3daIert(document.domain)%3E", "url": "https://t.me/CyberSecurityTechnologies/2246"}, {"timestamp": "2021-03-24T14:20:37Z", "date_only": false, "value": "2021-03-24T14:20:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reconshell/586", "record": "CVE-2020-7318", "field": "creation_timestamp", "uuid": "ef2694c8-50f7-46df-8f11-3b642655238e", "content": "Vulnerabilities in McAfee ePolicy Orchestrator\n\n#CVE-2020-7318 #XSS #Vulnerabilities #CSRF #SSRF #MITM\n\nhttps://reconshell.com/vulnerabilities-in-mcafee-epolicy-orchestrator/", "url": "https://t.me/reconshell/586"}, {"timestamp": "2021-09-21T06:42:55Z", "date_only": false, "value": "2021-09-21T06:42:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pwnwiki_zhchannel/20", "record": "CVE-2020-7318", "field": "creation_timestamp", "uuid": "0a610e99-5b90-4ff7-b6af-b24fe0dc69f8", "content": "CVE-2020-7318 McAfee ePolicy Orchestrator Reflected XSS\nhttps://www.pwnwiki.org/index.php?title=CVE-2020-7318_McAfee_ePolicy_Orchestrator_Reflected_XSS", "url": "https://t.me/pwnwiki_zhchannel/20"}, {"timestamp": "2022-05-24T17:30:40Z", "date_only": false, "value": "2022-05-24T17:30:40Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9WW8-F379-FQCJ", "record": "GHSA-9WW8-F379-FQCJ", "field": "published"}, {"timestamp": "2022-05-24T17:30:40Z", "date_only": false, "value": "2022-05-24T17:30:40Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9WW8-F379-FQCJ", "record": "GHSA-9WW8-F379-FQCJ", "field": "modified"}, {"timestamp": "2023-12-13T01:21:52.115Z", "date_only": false, "value": "2023-12-13T01:21:52.115710Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-7318", "record": "GSD-2020-7318", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T09:25:48.958Z", "date_only": false, "value": "2024-08-04T09:25:48.958Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2020-7318", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T09:25:48.958Z", "date_only": false, "value": "2024-08-04T09:25:48.958Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2020-7318", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:24:42.610Z", "date_only": false, "value": "2026-06-17T03:24:42.610", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-7318", "record": "FKIE_CVE-2020-7318", "field": "lastModified"}, {"timestamp": "2026-08-02T14:32:10.973Z", "date_only": false, "value": "2026-08-02T14:32:10.973105Z", "kind": "sighting", "label": "Seen", "source": "Telegram/HWuoW3Yti_YSkPQ0excQ02cDA2ecf3ohVz4jQMGSayG2AQ", "record": "CVE-2020-7318", "field": "creation_timestamp", "uuid": "40378914-8604-4456-b891-4f59372b9f89"}, {"timestamp": "2026-08-03T02:07:04.086Z", "date_only": false, "value": "2026-08-03T02:07:04.086296Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/HWuoW3Yti_YSkPQ0excQ02cDA2ecf3ohVz4jQMGSayG2AQ", "record": "CVE-2020-7318", "field": "creation_timestamp", "uuid": "0ffc3a0e-9ee2-4bcf-8ef0-a556826d1f69"}]}