CVE-2022-3339

CVE-2022-3339 is a reflected cross-site scripting (XSS) vulnerability affecting McAfee ePolicy Orchestrator (ePO) versions prior to 5.10 Update 14. An unauthenticated attacker could exploit this by tricking an authenticated ePO administrator into clicking a malicious link. This medium-severity vulnerability (CVSS 6.1) has a low attack complexity and could lead to limited access to sensitive information and minor data alteration within ePO. There is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, indicating low current threat activity.